5.1

CVE-2010-3573

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: the previous information was obtained from the October 2010 CPU.  Oracle has not commented on claims from a reliable downstream vendor that this is related to missing validation of request headers in the HttpURLConnection class when they are set by applets, which allows remote attackers to bypass the intended security policy.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sun ≫ Jre Update update_21 Version <= 1.6.0
Sun ≫ Jre Version 1.6.0
Sun ≫ Jre Version 1.6.0 Update update_1
Sun ≫ Jre Version 1.6.0 Update update_10
Sun ≫ Jre Version 1.6.0 Update update_11
Sun ≫ Jre Version 1.6.0 Update update_12
Sun ≫ Jre Version 1.6.0 Update update_13
Sun ≫ Jre Version 1.6.0 Update update_14
Sun ≫ Jre Version 1.6.0 Update update_15
Sun ≫ Jre Version 1.6.0 Update update_16
Sun ≫ Jre Version 1.6.0 Update update_17
Sun ≫ Jre Version 1.6.0 Update update_18
Sun ≫ Jre Version 1.6.0 Update update_19
Sun ≫ Jre Version 1.6.0 Update update_2
Sun ≫ Jre Version 1.6.0 Update update_20
Sun ≫ Jre Version 1.6.0 Update update_3
Sun ≫ Jre Version 1.6.0 Update update_4
Sun ≫ Jre Version 1.6.0 Update update_5
Sun ≫ Jre Version 1.6.0 Update update_6
Sun ≫ Jre Version 1.6.0 Update update_7
Sun ≫ Jdk Update update_21 Version <= 1.6.0
Sun ≫ Jdk Version 1.6.0
Sun ≫ Jdk Version 1.6.0 Update update_10
Sun ≫ Jdk Version 1.6.0 Update update_11
Sun ≫ Jdk Version 1.6.0 Update update_12
Sun ≫ Jdk Version 1.6.0 Update update_13
Sun ≫ Jdk Version 1.6.0 Update update_14
Sun ≫ Jdk Version 1.6.0 Update update_15
Sun ≫ Jdk Version 1.6.0 Update update_16
Sun ≫ Jdk Version 1.6.0 Update update_17
Sun ≫ Jdk Version 1.6.0 Update update_18
Sun ≫ Jdk Version 1.6.0 Update update_19
Sun ≫ Jdk Version 1.6.0 Update update_20
Sun ≫ Jdk Version 1.6.0 Update update_3
Sun ≫ Jdk Version 1.6.0 Update update_4
Sun ≫ Jdk Version 1.6.0 Update update_5
Sun ≫ Jdk Version 1.6.0 Update update_6
Sun ≫ Jdk Version 1.6.0 Update update_7
Sun ≫ Jdk Version 1.6.0 Update update1
Sun ≫ Jdk Version 1.6.0 Update update1_b06
Sun ≫ Jdk Version 1.6.0 Update update2
Sun ≫ Jdk Update update25 Version <= 1.5.0
Sun ≫ Jdk Version 1.5.0
Sun ≫ Jdk Version 1.5.0 Update update1
Sun ≫ Jdk Version 1.5.0 Update update10
Sun ≫ Jdk Version 1.5.0 Update update11
Sun ≫ Jdk Version 1.5.0 Update update12
Sun ≫ Jdk Version 1.5.0 Update update13
Sun ≫ Jdk Version 1.5.0 Update update14
Sun ≫ Jdk Version 1.5.0 Update update15
Sun ≫ Jdk Version 1.5.0 Update update16
Sun ≫ Jdk Version 1.5.0 Update update17
Sun ≫ Jdk Version 1.5.0 Update update18
Sun ≫ Jdk Version 1.5.0 Update update19
Sun ≫ Jdk Version 1.5.0 Update update2
Sun ≫ Jdk Version 1.5.0 Update update20
Sun ≫ Jdk Version 1.5.0 Update update21
Sun ≫ Jdk Version 1.5.0 Update update22
Sun ≫ Jdk Version 1.5.0 Update update23
Sun ≫ Jdk Version 1.5.0 Update update24
Sun ≫ Jdk Version 1.5.0 Update update3
Sun ≫ Jdk Version 1.5.0 Update update4
Sun ≫ Jdk Version 1.5.0 Update update5
Sun ≫ Jdk Version 1.5.0 Update update6
Sun ≫ Jdk Version 1.5.0 Update update7
Sun ≫ Jdk Version 1.5.0 Update update8
Sun ≫ Jdk Version 1.5.0 Update update9
Sun ≫ Jre Update update25 Version <= 1.5.0
Sun ≫ Jre Version 1.5.0
Sun ≫ Jre Version 1.5.0 Update update1
Sun ≫ Jre Version 1.5.0 Update update10
Sun ≫ Jre Version 1.5.0 Update update11
Sun ≫ Jre Version 1.5.0 Update update12
Sun ≫ Jre Version 1.5.0 Update update13
Sun ≫ Jre Version 1.5.0 Update update14
Sun ≫ Jre Version 1.5.0 Update update15
Sun ≫ Jre Version 1.5.0 Update update16
Sun ≫ Jre Version 1.5.0 Update update17
Sun ≫ Jre Version 1.5.0 Update update18
Sun ≫ Jre Version 1.5.0 Update update19
Sun ≫ Jre Version 1.5.0 Update update2
Sun ≫ Jre Version 1.5.0 Update update20
Sun ≫ Jre Version 1.5.0 Update update21
Sun ≫ Jre Version 1.5.0 Update update22
Sun ≫ Jre Version 1.5.0 Update update23
Sun ≫ Jre Version 1.5.0 Update update24
Sun ≫ Jre Version 1.5.0 Update update3
Sun ≫ Jre Version 1.5.0 Update update4
Sun ≫ Jre Version 1.5.0 Update update5
Sun ≫ Jre Version 1.5.0 Update update6
Sun ≫ Jre Version 1.5.0 Update update7
Sun ≫ Jre Version 1.5.0 Update update8
Sun ≫ Jre Version 1.5.0 Update update9
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 10.56% 0.952
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.1 4.9 6.4
AV:N/AC:H/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.securityfocus.com/archive/1/516397/100/0/threaded
http://www.vmware.com/security/advisories/VMSA-2011-0003.html
http://marc.info/?l=bugtraq&m=134254866602253&w=2
http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049455.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049528.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049702.html
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html
http://secunia.com/advisories/41967
Vendor Advisory
http://secunia.com/advisories/41972
Vendor Advisory
http://secunia.com/advisories/44954
Vendor Advisory
http://security.gentoo.org/glsa/glsa-201406-32.xml
http://support.avaya.com/css/P8/documents/100114315
http://support.avaya.com/css/P8/documents/100114327
http://www.oracle.com/technetwork/topics/security/javacpuoct2010-176258.html
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2010-0768.html
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2010-0770.html
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2010-0807.html
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2010-0865.html
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2010-0987.html
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2011-0880.html
Vendor Advisory
http://www.ubuntu.com/usn/USN-1010-1
http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
Patch
Vendor Advisory
http://secunia.com/advisories/42974
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2010-0873.html
Vendor Advisory
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c02616748
http://support.avaya.com/css/P8/documents/100123193
https://bugzilla.redhat.com/show_bug.cgi?id=642202
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11990
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12220