CVE:CVE-2016-0376
CNNVD:CNNVD-201605-017
IBM SDK, Java Technology Edition是美国IBM公司的一款用于Java应用程序开发的软件开发工具包。
IBM SDK, Java Technology Edition中的com.ibm.rmi.io.SunSerializableFactory类存在安全漏洞，该漏洞源于程序没有正确反序列化AccessController doPrivileged块中的类。远程攻击者可利用该漏洞绕过沙盒保护机制，在系统上执行任意代码。以下版本受到影响：IBM SDK, Java Technology Edition 6 Service Refresh 16 Fix Pack 21及之前的版本；IBM SDK, Java Technology Edition 6R1 Service Refresh 8 Fix Pack 20及之前的版本；IBM SDK, Java Technology Edition 7 Service Refresh 9 Fix Pack 31及之前的版本；IBM SDK, Java Technology Edition 7R1 Service Refresh 3 Fix Pack 31及之前的版本；IBM SDK, Java Technology Edition 8 Service Refresh 2 Fix Pack 11及之前的版本。
solution:Upgrade novell suse_linux_enterprise_module_for_legacy_software to a higher version than 12,and avoid the version 12; Upgrade novell suse_linux_enterprise_server to a higher version than 11.0:sp2,11.0:sp3,11.0:sp4,12.0,12.0:sp1,and avoid the version 11.0:sp2,11.0:sp3,11.0:sp4,12.0,12.0:sp1; Upgrade novell suse_linux_enterprise_software_development_kit to a higher version than 11.0:sp4,12.0,12.0:sp1,and avoid the version 11.0:sp4,12.0,12.0:sp1; Upgrade novell suse_manager to a higher version than 2.1,and avoid the version 2.1; Upgrade novell suse_manager_proxy to a higher version than 2.1,and avoid the version 2.1; Upgrade novell suse_openstack_cloud to a higher version than 5,and avoid the version 5; Upgrade ibm java_sdk to a higher version than 6.0.16.25,6.1.8.25,7.0.9.40,7.1.3.40,8.0.3.0,and avoid the version [6.0.0.0,6.0.16.25),[6.1.0.0,6.1.8.25),[7.0.0.0,7.0.9.40),[7.1.0.0,7.1.3.40),[8.0.0.0,8.0.3.0); Upgrade redhat satellite to a higher version than 5.6,5.7,and avoid the version 5.6,5.7; Upgrade redhat enterprise_linux_desktop to a higher version than 5.0,6.0,7.0,and avoid the version 5.0,6.0,7.0; Upgrade redhat enterprise_linux_hpc_node_supplementary to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_eus to a higher version than 6.7,7.2,7.3,7.4,7.5,and avoid the version 6.7,7.2,7.3,7.4,7.5; Upgrade redhat enterprise_linux_workstation to a higher version than 5.0,6.0,7.0,and avoid the version 5.0,6.0,7.0