• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Sun Java Runtime Environment Multiple Remote Privilege Escalation Vulnerabilities

Bugtraq ID:	21673
Class:	Access Validation Error
CVE:	CVE-2006-6745
Remote:	Yes
Local:	No
Published:	Dec 19 2006 12:00AM
Updated:	Dec 18 2007 08:06PM
Credit:	Tom Hawtin is credited with the discovery of these vulnerabilities.
Vulnerable:	SuSE SLES 9 SuSE SLES 10 SuSE SLED 10.0 SuSE Linux 9.3 SuSE Linux 10.1 SuSE Linux 10.0 Sun JRE (Linux Production Release) 1.5 _07 Sun JRE (Linux Production Release) 1.5 _05 Sun JRE (Linux Production Release) 1.5 _04 Sun JRE (Linux Production Release) 1.5 _03 Sun JRE (Linux Production Release) 1.5 _02 Sun JRE (Linux Production Release) 1.5 _01 Sun Java 2 Standard Edition SDK 1.4.2 _12 Sun Java 2 Standard Edition SDK 1.4.2 _12 Sun Java 2 Standard Edition SDK 1.4.2 _11 Sun Java 2 Standard Edition SDK 1.4.2 _10 Sun Java 2 Standard Edition SDK 1.4.2 _09 Sun Java 2 Standard Edition SDK 1.4.2 _08 Sun Java 2 Standard Edition SDK 1.4.2 _07 Sun Java 2 Standard Edition SDK 1.4.2 _06 Sun Java 2 Standard Edition SDK 1.4.2 _05 Sun Java 2 Standard Edition SDK 1.4.2 _04 Sun Java 2 Standard Edition SDK 1.4.2 _03 Sun Java 2 Standard Edition SDK 1.4.2 _02 Sun Java 2 Standard Edition SDK 1.4.2 _01 Sun Java 2 Standard Edition SDK 1.4.2 Sun Java 2 Standard Edition SDK 1.4.1 Sun Java 2 Standard Edition SDK 1.4 Sun Java 2 Standard Edition SDK 5.0 Update 7 Sun Java 2 Standard Edition SDK 5.0 Update 6 Sun Java 2 Standard Edition SDK 5.0 Update 5 Sun Java 2 Standard Edition SDK 5.0 Update 4 Sun Java 2 Standard Edition SDK 5.0 Update 3 Sun Java 2 Standard Edition SDK 5.0 Update 2 Sun Java 2 Standard Edition SDK 5.0 Update 1 Sun Java 2 Standard Edition SDK 5.0 Sun Java 2 Runtime Environment 1.5 _06 Sun Java 2 Runtime Environment 1.5 Sun Java 2 Runtime Environment 1.4.2 _13 Sun Java 2 Runtime Environment 1.4.2 _12 Sun Java 2 Runtime Environment 1.4.2 _11 Sun Java 2 Runtime Environment 1.4.2 _10 Sun Java 2 Runtime Environment 1.4.2 _09 Sun Java 2 Runtime Environment 1.4.2 _08 Sun Java 2 Runtime Environment 1.4.2 _07 Sun Java 2 Runtime Environment 1.4.2 _06 Sun Java 2 Runtime Environment 1.4.2 _05 Sun Java 2 Runtime Environment 1.4.2 _04 Sun Java 2 Runtime Environment 1.4.2 _03 + Oracle Oracle10g Application Server 10.1 .0.2 + Oracle Oracle10g Application Server 10.1 .0.2 + Oracle Oracle10g Application Server 10.1 .0.2 + Oracle Oracle10g Enterprise Edition 10.1 .0.2 + Oracle Oracle10g Enterprise Edition 10.1 .0.2 + Oracle Oracle10g Enterprise Edition 10.1 .0.2 + Oracle Oracle10g Personal Edition 10.1 .0.2 + Oracle Oracle10g Personal Edition 10.1 .0.2 + Oracle Oracle10g Personal Edition 10.1 .0.2 + Oracle Oracle10g Standard Edition 10.1 .0.2 Sun Java 2 Runtime Environment 1.4.2 _02 Sun Java 2 Runtime Environment 1.4.2 _01 Sun Java 2 Runtime Environment 1.4.2 Sun Java 2 Runtime Environment 1.4.1 Sun Java 2 Runtime Environment 5.0 Update 7 Sun Java 2 Runtime Environment 5.0 Update 6 Sun Java 2 Runtime Environment 5.0 Update 5 Sun Java 2 Runtime Environment 5.0 Update 4 Sun Java 2 Runtime Environment 5.0 Update 3 Sun Java 2 Runtime Environment 5.0 Update 2 Sun Java 2 Runtime Environment 5.0 Update 1 Sun Java 2 Runtime Environment 5.0 S.u.S.E. UnitedLinux 1.0 S.u.S.E. SuSE Linux Standard Server 8.0 S.u.S.E. SuSE Linux School Server for i386 S.u.S.E. SUSE LINUX Retail Solution 8.0 S.u.S.E. SuSE Linux Openexchange Server 4.0 S.u.S.E. SUSE Linux Enterprise Server 10 SP1 S.u.S.E. SUSE Linux Enterprise Desktop 10 SP1 S.u.S.E. Open-Enterprise-Server 0 S.u.S.E. Novell Linux POS 9 S.u.S.E. Linux Enterprise Server 9 S.u.S.E. Linux Enterprise Server 8 S.u.S.E. Linux Enterprise Server 10 S.u.S.E. Linux Enterprise SDK 10 RedHat Enterprise Linux Extras 4 RedHat Enterprise Linux Extras 3 Novell Open Enterprise Server (OES) 0 Novell Linux Desktop 9 HP HP-UX B.11.23 HP HP-UX B.11.11 Gentoo Linux BEA Systems JRockit 8.1 BEA Systems JRockit 8.0 BEA Systems JRockit 7.0 BEA Systems JRockit 3.1.5 BEA Systems JRockit 3.1.4 .1 BEA Systems JRockit 3.1.4 BEA Systems JRockit 3.1.3 BEA Systems JRockit 3.1.2 BEA Systems JRockit 3.1.1 BEA Systems JRockit 1.4.2 BEA Systems JRockit 1.4.2 R4.5 Avaya Predictive Dialer (PDS) APC 3.0 Avaya Interactive Response 1.3 Avaya Interactive Response 2.0 Avaya Integrated Management Avaya CVLAN Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.4.10 Apple Mac OS X 10.4.11 Apple Mac OS X 10.4.10
Not Vulnerable:	Sun JRE (Solaris Production Release) 1.3.1 Sun JRE (Solaris Production Release) 1.3 _04 Sun JRE (Solaris Production Release) 1.3 _03 Sun JRE (Solaris Production Release) 1.3 _01 Sun JRE (Linux Production Release) 1.3.1 _19 Sun JRE (Linux Production Release) 1.3.1 _18 Sun JRE (Linux Production Release) 1.3.1 _17 Sun JRE (Linux Production Release) 1.3.1 _16 Sun JRE (Linux Production Release) 1.3.1 _15 Sun JRE (Linux Production Release) 1.3.1 _04 Sun JRE (Linux Production Release) 1.3.1 _01a Sun Java 2 Standard Edition SDK 1.4.2 _13 Sun Java 2 Standard Edition SDK 1.3.1 _19 Sun Java 2 Standard Edition SDK 1.3.1 .x Sun Java 2 Standard Edition SDK 1.3 Sun Java 2 Runtime Environment 1.3.1 _08 Sun Java 2 Runtime Environment 1.3.1 _01 Sun Java 2 Runtime Environment 1.3 _05 Sun Java 2 Runtime Environment 1.3 _02 Sun Java 2 Runtime Environment 1.3 Sun Java 2 Runtime Environment 5.0 Update 8 BEA Systems JRockit 1.4.2 07 BEA Systems JRockit 1.3.1 20 BEA Systems JRockit 1.5.0_04