CVE

Id
46128  
CVE No.
CVE-2010-3544  
Status
Candidate  
Description
Unspecified vulnerability in the Oracle iPlanet Web Server (Sun Java System Web Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect integrity and availability via unknown vectors related to Administration. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable source that this is cross-site request forgery (CSRF) that allows remote attackers to stop an instance via the management console.  
Phase
Assigned (20100920)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
501376 46128 CVE-2010-3544 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html  View
501377 46128 CVE-2010-3544 CERT:TA10-287A  View
501378 46128 CVE-2010-3544 URL:http://www.us-cert.gov/cas/techalerts/TA10-287A.html  View
501379 46128 CVE-2010-3544 JVN:JVN#50133036  View
501380 46128 CVE-2010-3544 URL:http://jvn.jp/en/jp/JVN50133036/index.html  View
501381 46128 CVE-2010-3544 JVNDB:JVNDB-2010-000042  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
36486 JVNDB-2010-002266 複数の Oracle 製品の JNDI コンポーネントにおける脆弱性 複数の Oracle 製品の JNDI コンポーネントには、機密性に影響のある脆弱性が存在します。 CVE-2010-3548 46128 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002266.html  View