ByteOS Network

NVD Vulnerability Details :

CVE-2013-0409

Modified

Source-secalert_us@oracle.com

Published At-02 Feb, 2013 | 00:55

Updated At-29 Apr, 2026 | 01:13

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38 allows remote attackers to affect confidentiality via vectors related to JMX.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N

Type: Primary

Version: 2.0

Base score: 5.0

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:N/C:P/I:N/A:N

CPE Matches

Oracle Corporation

>>jre>>1.7.0

cpe:2.3:a:oracle:jre:1.7.0:*:*:*:*:*:*:*

Oracle Corporation

>>jre>>1.7.0

cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*

Oracle Corporation

>>jre>>1.7.0

cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:*:*:*

Oracle Corporation

>>jre>>1.7.0

cpe:2.3:a:oracle:jre:1.7.0:update11:*:*:*:*:*:*

Oracle Corporation

>>jre>>1.7.0

cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*

Oracle Corporation

>>jre>>1.7.0

cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*

Oracle Corporation

>>jre>>1.7.0

cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*

Oracle Corporation

>>jre>>1.7.0

cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*

Oracle Corporation

>>jre>>1.7.0

cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*

Oracle Corporation

>>jre>>1.7.0

cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:*

Oracle Corporation

>>jre>>1.7.0

cpe:2.3:a:oracle:jre:1.7.0:update9:*:*:*:*:*:*

Oracle Corporation

>>jdk>>1.7.0

cpe:2.3:a:oracle:jdk:1.7.0:*:*:*:*:*:*:*

Oracle Corporation

>>jdk>>1.7.0

cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:*

Oracle Corporation

>>jdk>>1.7.0

cpe:2.3:a:oracle:jdk:1.7.0:update10:*:*:*:*:*:*

Oracle Corporation

>>jdk>>1.7.0

cpe:2.3:a:oracle:jdk:1.7.0:update11:*:*:*:*:*:*

Oracle Corporation

>>jdk>>1.7.0

cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:*

Oracle Corporation

>>jdk>>1.7.0

cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:*

Oracle Corporation

>>jdk>>1.7.0

cpe:2.3:a:oracle:jdk:1.7.0:update4:*:*:*:*:*:*

Oracle Corporation

>>jdk>>1.7.0

cpe:2.3:a:oracle:jdk:1.7.0:update5:*:*:*:*:*:*

Oracle Corporation

>>jdk>>1.7.0

cpe:2.3:a:oracle:jdk:1.7.0:update6:*:*:*:*:*:*

Oracle Corporation

>>jdk>>1.7.0

cpe:2.3:a:oracle:jdk:1.7.0:update7:*:*:*:*:*:*

Oracle Corporation

>>jdk>>1.7.0

cpe:2.3:a:oracle:jdk:1.7.0:update9:*:*:*:*:*:*

Oracle Corporation

>>jre>>1.6.0

cpe:2.3:a:oracle:jre:1.6.0:update22:*:*:*:*:*:*

Oracle Corporation

>>jre>>1.6.0

cpe:2.3:a:oracle:jre:1.6.0:update23:*:*:*:*:*:*

Oracle Corporation

>>jre>>1.6.0

cpe:2.3:a:oracle:jre:1.6.0:update24:*:*:*:*:*:*

Oracle Corporation

>>jre>>1.6.0

cpe:2.3:a:oracle:jre:1.6.0:update25:*:*:*:*:*:*

Oracle Corporation

>>jre>>1.6.0

cpe:2.3:a:oracle:jre:1.6.0:update26:*:*:*:*:*:*

Oracle Corporation

>>jre>>1.6.0

cpe:2.3:a:oracle:jre:1.6.0:update27:*:*:*:*:*:*

Oracle Corporation

>>jre>>1.6.0

cpe:2.3:a:oracle:jre:1.6.0:update29:*:*:*:*:*:*

Oracle Corporation

>>jre>>1.6.0

cpe:2.3:a:oracle:jre:1.6.0:update30:*:*:*:*:*:*

Oracle Corporation

>>jre>>1.6.0

cpe:2.3:a:oracle:jre:1.6.0:update31:*:*:*:*:*:*

Oracle Corporation

>>jre>>1.6.0

cpe:2.3:a:oracle:jre:1.6.0:update32:*:*:*:*:*:*

Oracle Corporation

>>jre>>1.6.0

cpe:2.3:a:oracle:jre:1.6.0:update33:*:*:*:*:*:*

Oracle Corporation

>>jre>>1.6.0

cpe:2.3:a:oracle:jre:1.6.0:update34:*:*:*:*:*:*

Oracle Corporation

>>jre>>1.6.0

cpe:2.3:a:oracle:jre:1.6.0:update35:*:*:*:*:*:*

Oracle Corporation

>>jre>>1.6.0

cpe:2.3:a:oracle:jre:1.6.0:update37:*:*:*:*:*:*

Oracle Corporation

>>jre>>1.6.0

cpe:2.3:a:oracle:jre:1.6.0:update38:*:*:*:*:*:*

Sun Microsystems (Oracle Corporation)

>>jre>>1.6.0

cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*

Sun Microsystems (Oracle Corporation)

>>jre>>1.6.0

cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*

Sun Microsystems (Oracle Corporation)

>>jre>>1.6.0

cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*

Sun Microsystems (Oracle Corporation)

>>jre>>1.6.0

cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*

Sun Microsystems (Oracle Corporation)

>>jre>>1.6.0

cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*

Sun Microsystems (Oracle Corporation)

>>jre>>1.6.0

cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*

Sun Microsystems (Oracle Corporation)

>>jre>>1.6.0

cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*

Sun Microsystems (Oracle Corporation)

>>jre>>1.6.0

cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*

Sun Microsystems (Oracle Corporation)

>>jre>>1.6.0

cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*

Sun Microsystems (Oracle Corporation)

>>jre>>1.6.0

cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*

Sun Microsystems (Oracle Corporation)

>>jre>>1.6.0

cpe:2.3:a:sun:jre:1.6.0:update_18:*:*:*:*:*:*

Sun Microsystems (Oracle Corporation)

>>jre>>1.6.0

cpe:2.3:a:sun:jre:1.6.0:update_19:*:*:*:*:*:*

Sun Microsystems (Oracle Corporation)

>>jre>>1.6.0

cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

Evaluator Description

Per http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html "Applies to client deployment of Java only. This vulnerability can be exploited only through untrusted Java Web Start applications and untrusted Java applets. (Untrusted Java Web Start applications and untrusted applets run in the Java sandbox with limited privileges.) Applies to installation process on client deployment of Java."

References

Hyperlink	Source	Resource
http://marc.info/?l=bugtraq&m=136439120408139&w=2	secalert_us@oracle.com	N/A
http://marc.info/?l=bugtraq&m=136570436423916&w=2	secalert_us@oracle.com	N/A
http://marc.info/?l=bugtraq&m=136733161405818&w=2	secalert_us@oracle.com	N/A
http://rhn.redhat.com/errata/RHSA-2013-0236.html	secalert_us@oracle.com	N/A
http://rhn.redhat.com/errata/RHSA-2013-0237.html	secalert_us@oracle.com	N/A
http://rhn.redhat.com/errata/RHSA-2013-1455.html	secalert_us@oracle.com	N/A
http://rhn.redhat.com/errata/RHSA-2013-1456.html	secalert_us@oracle.com	N/A
http://www.kb.cert.org/vuls/id/858729	secalert_us@oracle.com	US Government Resource
http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html	secalert_us@oracle.com	Vendor Advisory
http://www.securityfocus.com/bid/57728	secalert_us@oracle.com	N/A
http://www.us-cert.gov/cas/techalerts/TA13-032A.html	secalert_us@oracle.com	US Government Resource
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16530	secalert_us@oracle.com	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19114	secalert_us@oracle.com	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19240	secalert_us@oracle.com	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19383	secalert_us@oracle.com	N/A
http://marc.info/?l=bugtraq&m=136439120408139&w=2	af854a3a-2127-422b-91ae-364da2661108	N/A
http://marc.info/?l=bugtraq&m=136570436423916&w=2	af854a3a-2127-422b-91ae-364da2661108	N/A
http://marc.info/?l=bugtraq&m=136733161405818&w=2	af854a3a-2127-422b-91ae-364da2661108	N/A
http://rhn.redhat.com/errata/RHSA-2013-0236.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://rhn.redhat.com/errata/RHSA-2013-0237.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://rhn.redhat.com/errata/RHSA-2013-1455.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://rhn.redhat.com/errata/RHSA-2013-1456.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.kb.cert.org/vuls/id/858729	af854a3a-2127-422b-91ae-364da2661108	US Government Resource
http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.securityfocus.com/bid/57728	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.us-cert.gov/cas/techalerts/TA13-032A.html	af854a3a-2127-422b-91ae-364da2661108	US Government Resource
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16530	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19114	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19240	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19383	af854a3a-2127-422b-91ae-364da2661108	N/A