Test ID:	1.3.6.1.4.1.25623.1.0.69946
Category:	Fedora Local Security Checks
Title:	Fedora Core 15 FEDORA-2011-9541 (icedtea-web)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to icedtea-web announced via advisory FEDORA-2011-9541. Update Information: This security fix that addresses the following issues: - RH718164: Home directory path disclosure to untrusted applications - RH718170: Java Web Start security warning dialog manipulation References: [ 1 ] Bug #718164 - CVE-2011-2513 icedtea, icedtea-web: home directory path disclosure to untrusted applications https://bugzilla.redhat.com/show_bug.cgi?id=718164 [ 2 ] Bug #718170 - CVE-2011-2514 icedtea-web: Java Web Start security warning dialog manipulation https://bugzilla.redhat.com/show_bug.cgi?id=718170 Solution: Apply the appropriate updates. This update can be installed with the yum update program. Use su -c 'yum update icedtea-web' at the command line. For more information, refer to Managing Software with yum, available at http://docs.fedoraproject.org/yum/. https://secure1.securityspace.com/smysecure/catid.html?in=FEDORA-2011-9541 Risk factor : High
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-2513 http://icedtea.classpath.org/hg/release/icedtea-web-1.0/rev/b29fdd0f4d04 http://icedtea.classpath.org/hg/release/icedtea-web-1.1/rev/c7ce6c0e6227 http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2011-July/015171.html http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2011-July/015170.html RedHat Security Advisories: RHSA-2011:1100 http://rhn.redhat.com/errata/RHSA-2011-1100.html http://securitytracker.com/id?1025854 http://ubuntu.com/usn/usn-1178-1 Common Vulnerability Exposure (CVE) ID: CVE-2011-2514 http://icedtea.classpath.org/hg/release/icedtea-web-1.0/rev/b99f9a9769e0 http://icedtea.classpath.org/hg/release/icedtea-web-1.1/rev/512de5d90388
Copyright	Copyright (c) 2011 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.