CVE-2013-4041
First published: Sun Nov 24 2013(Updated: )
Unspecified vulnerability in IBM Java SDK 5.0.0 before SR16 FP4, 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0 before SR15 allows remote attackers to access restricted classes via unspecified vectors.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM JDK | =5.0.0.0 | |
| IBM JDK | =6.0.0.0 | |
| IBM JDK | =6.0.1.0 | |
| IBM JDK | =7.0.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00013.html
- http://rhn.redhat.com/errata/RHSA-2013-1507.html
- http://rhn.redhat.com/errata/RHSA-2013-1508.html
- http://rhn.redhat.com/errata/RHSA-2013-1509.html
- http://rhn.redhat.com/errata/RHSA-2013-1793.html
- http://secunia.com/advisories/56338
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV51087
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV51088
- http://www-01.ibm.com/support/docview.wss?uid=swg21655201
- http://www-01.ibm.com/support/docview.wss?uid=swg21655202
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86416
- https://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_November_2013
Frequently Asked Questions
What is the severity of CVE-2013-4041?
CVE-2013-4041 is considered a medium severity vulnerability due to its potential to allow remote attackers unauthorized access to restricted classes.
How do I fix CVE-2013-4041?
To fix CVE-2013-4041, upgrade to IBM Java SDK 5.0.0 SR16 FP4, 6.0.0 SR15, 6.0.1 SR7, or 7.0.0 SR6 or newer.
What versions of IBM Java SDK are affected by CVE-2013-4041?
CVE-2013-4041 affects IBM Java SDK versions 5.0.0 before SR16 FP4, 6.0.0 before SR15, 6.0.1 before SR7, and 7.0.0 before SR6.
Can CVE-2013-4041 be exploited remotely?
Yes, CVE-2013-4041 can be exploited remotely by attackers to access restricted classes.
What are the potential impacts of CVE-2013-4041?
The potential impacts of CVE-2013-4041 include unauthorized access to sensitive information and classes, which could lead to further exploitation.
- agent/references
- agent/severity
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- agent/event
- agent/type
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/author
- agent/description
- vendor/ibm
- canonical/ibm jdk
- version/ibm jdk/5.0.0.0
- version/ibm jdk/6.0.0.0
- version/ibm jdk/6.0.1.0
- version/ibm jdk/7.0.0.0