• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Sun Java Runtime Environment XML Data Processing Multiple Vulnerabilities

Solution:
The vendor has released an update. Please see the references for more information.


Oracle JRockit R27.6.0

• Oracle jrockit-jdk1.5.0_15-linux_ia32.tar.gz
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.5.0_15-linux_ia32.tar.gz


• Oracle jrockit-jdk1.5.0_15-linux_ia64.tar.gz
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.5.0_15-linux_ia64.tar.gz


• Oracle jrockit-jdk1.5.0_15-linux_x86_64.tar.gz
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.5.0_15-linux_x86_64.tar.gz


• Oracle jrockit-jdk1.5.0_15-solaris_sparcv9.tar.gz
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.5.0_15-solaris_sparcv9.tar.gz


• Oracle jrockit-jdk1.5.0_15-windows_ia32.zip
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.5.0_15-windows_ia32.zip


• Oracle jrockit-jdk1.5.0_15-windows_ia64.zip
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.5.0_15-windows_ia64.zip


• Oracle jrockit-jdk1.5.0_15-windows_x86_64.zip
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.5.0_15-windows_x86_64.zip


• Oracle jrockit-jdk1.6.0_05-linux_ia32.tar.gz
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.6.0_05-linux_ia32.tar.gz


• Oracle jrockit-jdk1.6.0_05-linux_x86_64.tar.gz
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.6.0_05-linux_x86_64.tar.gz


• Oracle jrockit-jdk1.6.0_05-solaris_sparcv9.tar.gz
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.6.0_05-solaris_sparcv9.tar.gz


• Oracle jrockit-jdk1.6.0_05-windows_ia32.zip
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.6.0_05-windows_ia32.zip


• Oracle jrockit-jdk1.6.0_05-windows_x86_64.zip
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.6.0_05-windows_x86_64.zip

Apple Mac OS X Server 10.5.5

• Apple JavaForMacOSX10.5Update2.dmg
  Java for Mac OS X 10.5 Update 2
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=21277&cat= 59&platform=osx&method=sa/JavaForMacOSX10.5Update2.dmg