I am in penetration testing on a server with Linux RHEL6/7 os. Vulnerability databases such as http://www.cvedetails.com/ mentioned the vulnerability CVE-2014-2483 for Java in Linux RHEL systems. I searched for the way that I can test my destination for the vulnerability, but I didn't find anything.
How can I test my server for this vulnerability?
The best/most accurate way to test for things like this is in a white-box security assessment approach, by checking the version of Java installed on the system. So on a redhat system something like rpm -qa would provide the version installed, then check the changelogs for the package which should list what CVE's have been addressed.
To automate that, something like Nessus can be used with credentials to provide info. on what outdated packages are installed on a system.
If you're trying to do this "black box" they you'd need to dig into the exact details of the vuln (which may well be tricky if there has been no disclosure of the technical details, which is the case with many issues) and then see if it's remotely exploitable.
There is an OpenVAS check that looks specifically for CVE-2014-2483.
http://plugins.openvas.org/index.php?oid=702987
Additional references can be found on CVE Details.
