CVE-2010-3561

Oracle Java SE/Jav for Bus <6 Update 21 & 5.0 Update 25 - Info Disc...

Title source: llm
STIX 2.1

Description

Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this involves the use of the privileged accept method in the ServerSocket class, which does not limit which hosts can connect and allows remote attackers to bypass intended network access restrictions.

References (27)

Core 27
Core References
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1010-1
Vendor Advisory x_refsource_confirm
http://support.avaya.com/css/P8/documents/100114327
Vendor Advisory x_refsource_confirm
http://support.avaya.com/css/P8/documents/100114315
Vendor Advisory x_refsource_confirm
http://support.avaya.com/css/P8/documents/100123193
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2010-0865.html
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-201406-32.xml
Mailing List vendor-advisory x_refsource_hp
http://marc.info/?l=bugtraq&m=134254866602253&w=2
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2010-0770.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2010-0768.html
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049702.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/44013
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=639880
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12200
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/42974
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/41972
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/3086
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12437
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/42377
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/516397/100/0/threaded
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049455.html
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049528.html

Scores

EPSS 0.0451
EPSS Percentile 89.3%

Details

Status published
Products (5)
sun/jdk 1.6.0 (20 CPE variants)
sun/jdk 1.5.0 (25 CPE variants)
sun/jdk < 1.5.0
sun/jdk < 1.6.0
sun/jre 1.6.0 (3 CPE variants)
Published Oct 19, 2010
Tracked Since Feb 18, 2026