CVE-2010-3573

Oracle Java SE/Jav for Bus <6-5 - Info Disclosure

Title source: llm
STIX 2.1

Description

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to missing validation of request headers in the HttpURLConnection class when they are set by applets, which allows remote attackers to bypass the intended security policy.

Exploits (1)

exploitdb WORKING POC
by Roberto Suggi Liverani · textremotewindows
https://www.exploit-db.com/exploits/15288

References (29)

Core 29
Core References
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=642202
Vendor Advisory x_refsource_confirm
http://support.avaya.com/css/P8/documents/100114327
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2010-0865.html
Vendor Advisory x_refsource_confirm
http://support.avaya.com/css/P8/documents/100114315
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-201406-32.xml
Mailing List vendor-advisory x_refsource_hp
http://marc.info/?l=bugtraq&m=134254866602253&w=2
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2010-0770.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2010-0768.html
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049702.html
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1010-1
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12220
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2010-0987.html
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/44954
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2011-0880.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2010-0873.html
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/42974
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/41972
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11990
Vendor Advisory x_refsource_confirm
http://support.avaya.com/css/P8/documents/100123193
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/516397/100/0/threaded
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/41967
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2010-0807.html
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049455.html
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049528.html

Scores

EPSS 0.0797
EPSS Percentile 92.1%

Details

Status published
Products (5)
sun/jdk 1.6.0 (20 CPE variants)
sun/jdk 1.5.0 (25 CPE variants)
sun/jdk < 1.5.0
sun/jdk < 1.6.0
sun/jre 1.6.0 (3 CPE variants)
Published Oct 19, 2010
Tracked Since Feb 18, 2026