Lucene search

[email protected]NVD:CVE-2010-3549

HistoryOct 19, 2010 - 10:00 p.m.

CVE-2010-3549

2010-10-1922:00:02

[email protected]

web.nvd.nist.gov

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

High

0.024 Low

EPSS

Percentile

90.1%

JSON

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is an HTTP request splitting vulnerability involving the handling of the chunked transfer encoding method by the HttpURLConnection class.

Affected configurations

NVD

Node

sunjreRange≤1.6.0update_21

sunjreMatch1.6.0

sunjreMatch1.6.0update_1

sunjreMatch1.6.0update_10

sunjreMatch1.6.0update_11

sunjreMatch1.6.0update_12

sunjreMatch1.6.0update_13

sunjreMatch1.6.0update_14

sunjreMatch1.6.0update_15

sunjreMatch1.6.0update_16

sunjreMatch1.6.0update_17

sunjreMatch1.6.0update_18

sunjreMatch1.6.0update_19

sunjreMatch1.6.0update_2

sunjreMatch1.6.0update_20

sunjreMatch1.6.0update_3

sunjreMatch1.6.0update_4

sunjreMatch1.6.0update_5

sunjreMatch1.6.0update_6

sunjreMatch1.6.0update_7

Node

sunjdkRange≤1.6.0update_21

sunjdkMatch1.6.0

sunjdkMatch1.6.0update_10

sunjdkMatch1.6.0update_11

sunjdkMatch1.6.0update_12

sunjdkMatch1.6.0update_13

sunjdkMatch1.6.0update_14

sunjdkMatch1.6.0update_15

sunjdkMatch1.6.0update_16

sunjdkMatch1.6.0update_17

sunjdkMatch1.6.0update_18

sunjdkMatch1.6.0update_19

sunjdkMatch1.6.0update_20

sunjdkMatch1.6.0update_3

sunjdkMatch1.6.0update_4

sunjdkMatch1.6.0update_5

sunjdkMatch1.6.0update_6

sunjdkMatch1.6.0update_7

sunjdkMatch1.6.0update1

sunjdkMatch1.6.0update1_b06

sunjdkMatch1.6.0update2

Node

sunjdkRange≤1.5.0update25

sunjdkMatch1.5.0

sunjdkMatch1.5.0update1

sunjdkMatch1.5.0update10

sunjdkMatch1.5.0update11

sunjdkMatch1.5.0update12

sunjdkMatch1.5.0update13

sunjdkMatch1.5.0update14

sunjdkMatch1.5.0update15

sunjdkMatch1.5.0update16

sunjdkMatch1.5.0update17

sunjdkMatch1.5.0update18

sunjdkMatch1.5.0update19

sunjdkMatch1.5.0update2

sunjdkMatch1.5.0update20

sunjdkMatch1.5.0update21

sunjdkMatch1.5.0update22

sunjdkMatch1.5.0update23

sunjdkMatch1.5.0update24

sunjdkMatch1.5.0update3

sunjdkMatch1.5.0update4

sunjdkMatch1.5.0update5

sunjdkMatch1.5.0update6

sunjdkMatch1.5.0update7

sunjdkMatch1.5.0update8

sunjdkMatch1.5.0update9

Node

sunsdkRange≤1.4.2_27

sunsdkMatch1.4.2

sunsdkMatch1.4.2_1

sunsdkMatch1.4.2_02

sunsdkMatch1.4.2_3

sunsdkMatch1.4.2_4

sunsdkMatch1.4.2_5

sunsdkMatch1.4.2_6

sunsdkMatch1.4.2_7

sunsdkMatch1.4.2_8

sunsdkMatch1.4.2_9

sunsdkMatch1.4.2_10

sunsdkMatch1.4.2_11

sunsdkMatch1.4.2_12

sunsdkMatch1.4.2_13

sunsdkMatch1.4.2_14

sunsdkMatch1.4.2_15

sunsdkMatch1.4.2_16

sunsdkMatch1.4.2_17

sunsdkMatch1.4.2_18

sunsdkMatch1.4.2_19

sunsdkMatch1.4.2_20

sunsdkMatch1.4.2_21

sunsdkMatch1.4.2_22

sunsdkMatch1.4.2_23

sunsdkMatch1.4.2_24

sunsdkMatch1.4.2_25

sunsdkMatch1.4.2_26

Node

sunjreRange≤1.5.0update25

sunjreMatch1.5.0

sunjreMatch1.5.0update1

sunjreMatch1.5.0update10

sunjreMatch1.5.0update11

sunjreMatch1.5.0update12

sunjreMatch1.5.0update13

sunjreMatch1.5.0update14

sunjreMatch1.5.0update15

sunjreMatch1.5.0update16

sunjreMatch1.5.0update17

sunjreMatch1.5.0update18

sunjreMatch1.5.0update19

sunjreMatch1.5.0update2

sunjreMatch1.5.0update20

sunjreMatch1.5.0update21

sunjreMatch1.5.0update22

sunjreMatch1.5.0update23

sunjreMatch1.5.0update24

sunjreMatch1.5.0update3

sunjreMatch1.5.0update4

sunjreMatch1.5.0update5

sunjreMatch1.5.0update6

sunjreMatch1.5.0update7

sunjreMatch1.5.0update8

sunjreMatch1.5.0update9

Node

sunjreRange≤1.4.2_27

sunjreMatch1.4.2

sunjreMatch1.4.2_1

sunjreMatch1.4.2_2

sunjreMatch1.4.2_3

sunjreMatch1.4.2_4

sunjreMatch1.4.2_5

sunjreMatch1.4.2_6

sunjreMatch1.4.2_7

sunjreMatch1.4.2_8

sunjreMatch1.4.2_9

sunjreMatch1.4.2_10

sunjreMatch1.4.2_11

sunjreMatch1.4.2_12

sunjreMatch1.4.2_13

sunjreMatch1.4.2_14

sunjreMatch1.4.2_15

sunjreMatch1.4.2_16

sunjreMatch1.4.2_17

sunjreMatch1.4.2_18

sunjreMatch1.4.2_19

sunjreMatch1.4.2_20

sunjreMatch1.4.2_21

sunjreMatch1.4.2_22

sunjreMatch1.4.2_23

sunjreMatch1.4.2_24

sunjreMatch1.4.2_25

sunjreMatch1.4.2_26

Node

sunjdkRange≤1.3.1_28

sunjdkMatch1.3.0

sunjdkMatch1.3.0_01

sunjdkMatch1.3.0_02

sunjdkMatch1.3.0_03

sunjdkMatch1.3.0_04

sunjdkMatch1.3.0_05

sunjdkMatch1.3.1

sunjdkMatch1.3.1_01

sunjdkMatch1.3.1_01a

sunjdkMatch1.3.1_02

sunjdkMatch1.3.1_03

sunjdkMatch1.3.1_04

sunjdkMatch1.3.1_05

sunjdkMatch1.3.1_06

sunjdkMatch1.3.1_07

sunjdkMatch1.3.1_08

sunjdkMatch1.3.1_09

sunjdkMatch1.3.1_10

sunjdkMatch1.3.1_11

sunjdkMatch1.3.1_12

sunjdkMatch1.3.1_13

sunjdkMatch1.3.1_14

sunjdkMatch1.3.1_15

sunjdkMatch1.3.1_16

sunjdkMatch1.3.1_17

sunjdkMatch1.3.1_18

sunjdkMatch1.3.1_19

sunjdkMatch1.3.1_20

sunjdkMatch1.3.1_21

sunjdkMatch1.3.1_22

sunjdkMatch1.3.1_23

sunjdkMatch1.3.1_24

sunjdkMatch1.3.1_25

sunjdkMatch1.3.1_26

sunjdkMatch1.3.1_27

Node

sunjreRange≤1.3.1_28

sunjreMatch1.3.0

sunjreMatch1.3.0update1

sunjreMatch1.3.0update2

sunjreMatch1.3.0update3

sunjreMatch1.3.0update4

sunjreMatch1.3.0update5

sunjreMatch1.3.1

sunjreMatch1.3.1update1

sunjreMatch1.3.1update2

sunjreMatch1.3.1_2

sunjreMatch1.3.1_03

sunjreMatch1.3.1_04

sunjreMatch1.3.1_05

sunjreMatch1.3.1_06

sunjreMatch1.3.1_07

sunjreMatch1.3.1_08

sunjreMatch1.3.1_09

sunjreMatch1.3.1_10

sunjreMatch1.3.1_11

sunjreMatch1.3.1_12

sunjreMatch1.3.1_13

sunjreMatch1.3.1_14

sunjreMatch1.3.1_15

sunjreMatch1.3.1_16

sunjreMatch1.3.1_17

sunjreMatch1.3.1_18

sunjreMatch1.3.1_19

sunjreMatch1.3.1_20

sunjreMatch1.3.1_21

sunjreMatch1.3.1_22

sunjreMatch1.3.1_23

sunjreMatch1.3.1_24

sunjreMatch1.3.1_25

sunjreMatch1.3.1_26

sunjreMatch1.3.1_27

Node

sunsdkRange≤1.3.1_28

sunsdkMatch1.3.0

sunsdkMatch1.3.0_01

sunsdkMatch1.3.0_02

sunsdkMatch1.3.0_03

sunsdkMatch1.3.0_04

sunsdkMatch1.3.0_05

sunsdkMatch1.3.1

sunsdkMatch1.3.1_01

sunsdkMatch1.3.1_01a

sunsdkMatch1.3.1_02

sunsdkMatch1.3.1_03

sunsdkMatch1.3.1_04

sunsdkMatch1.3.1_05

sunsdkMatch1.3.1_06

sunsdkMatch1.3.1_07

sunsdkMatch1.3.1_08

sunsdkMatch1.3.1_09

sunsdkMatch1.3.1_10

sunsdkMatch1.3.1_11

sunsdkMatch1.3.1_12

sunsdkMatch1.3.1_13

sunsdkMatch1.3.1_14

sunsdkMatch1.3.1_15

sunsdkMatch1.3.1_16

sunsdkMatch1.3.1_17

sunsdkMatch1.3.1_18

sunsdkMatch1.3.1_19

sunsdkMatch1.3.1_20

sunsdkMatch1.3.1_21

sunsdkMatch1.3.1_22

sunsdkMatch1.3.1_23

sunsdkMatch1.3.1_24

sunsdkMatch1.3.1_25

sunsdkMatch1.3.1_26

sunsdkMatch1.3.1_27

References

h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c02616748

lists.fedoraproject.org/pipermail/package-announce/2010-October/049455.html

lists.fedoraproject.org/pipermail/package-announce/2010-October/049528.html

lists.fedoraproject.org/pipermail/package-announce/2010-October/049702.html

lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html

lists.opensuse.org/opensuse-security-announce/2010-12/msg00005.html

marc.info/?l=bugtraq&m=134254866602253&w=2

secunia.com/advisories/41967

secunia.com/advisories/41972

secunia.com/advisories/42974

secunia.com/advisories/44954

security.gentoo.org/glsa/glsa-201406-32.xml

support.avaya.com/css/P8/documents/100114315

support.avaya.com/css/P8/documents/100114327

support.avaya.com/css/P8/documents/100123193

www.oracle.com/technetwork/topics/security/cpujan2011-194091.html

www.oracle.com/technetwork/topics/security/javacpuoct2010-176258.html

www.redhat.com/support/errata/RHSA-2010-0768.html

www.redhat.com/support/errata/RHSA-2010-0770.html

www.redhat.com/support/errata/RHSA-2010-0786.html

www.redhat.com/support/errata/RHSA-2010-0807.html

www.redhat.com/support/errata/RHSA-2010-0865.html

www.redhat.com/support/errata/RHSA-2010-0873.html

www.redhat.com/support/errata/RHSA-2010-0986.html

www.redhat.com/support/errata/RHSA-2010-0987.html

www.redhat.com/support/errata/RHSA-2011-0880.html

www.securityfocus.com/archive/1/516397/100/0/threaded

www.securityfocus.com/bid/44027

www.ubuntu.com/usn/USN-1010-1

www.vmware.com/security/advisories/VMSA-2011-0003.html

www.vupen.com/english/advisories/2010/2745

bugzilla.redhat.com/show_bug.cgi?id=642180

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11559

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14340

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

High

0.024 Low

EPSS

Percentile

90.1%

JSON

Related for NVD:CVE-2010-3549

cve1 prion1 ubuntucve1 veracode1 cvelist1 suse2 nessus40 redhat9 openvas22 fedora3 centos1 oraclelinux1 ubuntu1 cisco1 vmware2 gentoo2 oracle1