NetSight
IP …
high8.1

CVE-2016-0376

The com.ibm.rmi.io.SunSerializableFactory class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before S…

Impact

The com.ibm.rmi.io.SunSerializableFactory class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) does not properly deserialize classes in an AccessController doPrivileged block, which allows remote attackers to bypass a sandbox protection mechanism and execute arbitrary code as demonstrated by the readValue method of the com.ibm.rmi.io.ValueHandlerPool.ValueHandlerSingleton class, which implements the javax.rmi.CORBA.ValueHandler interface. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-5456.

Affected products

VendorProductAffected versions
NovellSuse Linux Enterprise Software Development Kit
Versions 11.0, 12.0
NovellSuse Linux Enterprise Module For Legacy Software
Version 12
NovellSuse Linux Enterprise Server
Versions 11.0, 12.0
NovellSuse Manager
Version 2.1
NovellSuse Manager Proxy
Version 2.1
NovellSuse Openstack Cloud
Version 5
IbmJava Sdk
from 6.0.0.0 before 6.0.16.25
from 6.1.0.0 before 6.1.8.25
from 7.0.0.0 before 7.0.9.40
from 7.1.0.0 before 7.1.3.40
from 8.0.0.0 before 8.0.3.0
RedhatSatellite
Versions 5.6, 5.7
RedhatEnterprise Linux Desktop
Versions 5.0, 6.0, 7.0
RedhatEnterprise Linux Hpc Node Supplementary
Versions 6.0, 7.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Server Eus
Versions 6.7, 7.2, 7.3, 7.4, 7.5

References