Lucene search
Ubuntu.comUB:CVE-2010-3541HistoryOct 19, 2010 - 12:00 a.m.
CVE-2010-3541
2010-10-1900:00:00
ubuntu.com
ubuntu.com
10
0.021 Low
EPSS
Percentile
89.2%
Unspecified vulnerability in the Networking component in Oracle Java SE and
Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows
remote attackers to affect confidentiality, integrity, and availability via
unknown vectors. NOTE: the previous information was obtained from the
October 2010 CPU. Oracle has not commented on claims from a reliable
downstream vendor that this is related to missing validation of request
headers in the HttpURLConnection class when they are set by applets, which
allows remote attackers to bypass the intended security policy.
Notes
| Author | Note |
|---|---|
| sbeattie | red hat description: HttpURLConnection did not validate request headers set by applets, which could allow remote attackers to trigger actions otherwise restricted to HTTP clients. |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 8.04 | noarch | openjdk-6 | < 1.8.2-4ubuntu1~8.04.1 | UNKNOWN |
| ubuntu | 9.04 | noarch | openjdk-6 | < 1.8.2-4ubuntu1~9.04.1 | UNKNOWN |
| ubuntu | 9.10 | noarch | openjdk-6 | < 1.8.2-4ubuntu1~9.10.1 | UNKNOWN |
| ubuntu | 10.04 | noarch | openjdk-6 | < 1.8.2-4ubuntu2 | UNKNOWN |
| ubuntu | 10.10 | noarch | openjdk-6 | < 6b20-1.9.1-1ubuntu3 | UNKNOWN |
| ubuntu | 10.10 | noarch | openjdk-6b18 | < 6b18-1.8.2-4ubuntu1 | UNKNOWN |
| ubuntu | 8.04 | noarch | sun-java6 | < 6.22-0ubuntu1~8.04.1 | UNKNOWN |
| ubuntu | 9.04 | noarch | sun-java6 | < 6.22-0ubuntu1~9.04.1 | UNKNOWN |
| ubuntu | 9.10 | noarch | sun-java6 | < 6.22-0ubuntu1~9.10.1 | UNKNOWN |
| ubuntu | 10.04 | noarch | sun-java6 | < 6.22-0ubuntu1~10.04 | UNKNOWN |
Related
prion
prion
Design/Logic Flaw
2010-10-19 22:00:00
veracode
veracode
Privilege Escalation
2020-04-10 00:52:13
cvelist
cvelist
CVE-2010-3541
2010-10-19 21:00:00
cve
cve
CVE-2010-3541
2010-10-19 22:00:00
nessus
nessus
RHEL 3 / 4 / 5 : java-1.4.2-ibm (RHSA-2010:0786)
2010-10-21 00:00:00
SuSE 10 Security Update : IBM Java 1.4.2 (ZYPP Patch Number 7231)
2010-12-17 00:00:00
SuSE 11.1 Security Update : IBM Java 1.4.2 (SAT Patch Number 3528)
2011-01-21 00:00:00
redhat
redhat
(RHSA-2010:0986) Moderate: java-1.4.2-ibm-sap security update
2010-12-15 00:00:00
(RHSA-2010:0786) Critical: java-1.4.2-ibm security update
2010-10-20 00:00:00
(RHSA-2010:0865) Important: java-1.6.0-openjdk security and bug fix update
2010-11-10 00:00:00
suse
suse
remote code execution in java-1_4_2-ibm,IBMJava2-JRE
2010-12-17 11:21:31
remote code execution in java-1_6_0-ibm
2011-01-25 17:16:52
fedora
fedora
[SECURITY] Fedora 12 Update: java-1.6.0-openjdk-1.6.0.0-41.1.8.2.fc12
2010-10-21 06:04:44
[SECURITY] Fedora 14 Update: java-1.6.0-openjdk-1.6.0.0-44.1.9.1.fc14
2010-10-18 05:38:07
[SECURITY] Fedora 13 Update: java-1.6.0-openjdk-1.6.0.0-43.1.8.2.fc13
2010-10-19 07:04:11
oraclelinux
oraclelinux
java-1.6.0-openjdk security and bug fix update
2010-10-13 00:00:00
openvas
openvas
Fedora Update for java-1.6.0-openjdk FEDORA-2010-16294
2010-10-22 00:00:00
Fedora Update for java-1.6.0-openjdk FEDORA-2010-16240
2010-10-22 00:00:00
Fedora Update for java-1.6.0-openjdk FEDORA-2010-16240
2010-10-22 00:00:00
centos
centos
java security update
2010-10-14 10:59:21
ubuntu
ubuntu
OpenJDK vulnerabilities
2010-10-28 00:00:00
cisco
cisco
MIT Kerberos GSS-API Library Remote Denial of Service Vulnerability
2010-05-19 15:40:37
vmware
vmware
gentoo
gentoo
Oracle JRE/JDK: Multiple vulnerabilities
2011-11-05 00:00:00
IcedTea JDK: Multiple vulnerabilities
2014-06-29 00:00:00
oracle
oracle
Oracle Critical Patch Update - January 2011
2011-01-18 00:00:00