CVE

Id
46157  
CVE No.
CVE-2010-3573  
Status
Candidate  
Description
Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to missing validation of request headers in the HttpURLConnection class when they are set by applets, which allows remote attackers to bypass the intended security policy.  
Phase
Assigned (20100920)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
502505 46157 CVE-2010-3573 BUGTRAQ:20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX  View
502506 46157 CVE-2010-3573 URL:http://www.securityfocus.com/archive/1/archive/1/516397/100/0/threaded  View
502507 46157 CVE-2010-3573 CONFIRM:http://www.oracle.com/technetwork/topics/security/javacpuoct2010-176258.html  View
502508 46157 CVE-2010-3573 CONFIRM:http://support.avaya.com/css/P8/documents/100114315  View
502509 46157 CVE-2010-3573 CONFIRM:http://support.avaya.com/css/P8/documents/100114327  View
502510 46157 CVE-2010-3573 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=642202  View
502511 46157 CVE-2010-3573 CONFIRM:http://support.avaya.com/css/P8/documents/100123193  View
502512 46157 CVE-2010-3573 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html  View
502513 46157 CVE-2010-3573 CONFIRM:http://www.vmware.com/security/advisories/VMSA-2011-0003.html  View
502514 46157 CVE-2010-3573 FEDORA:FEDORA-2010-16240  View
502515 46157 CVE-2010-3573 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049702.html  View
502516 46157 CVE-2010-3573 FEDORA:FEDORA-2010-16294  View
502517 46157 CVE-2010-3573 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049528.html  View
502518 46157 CVE-2010-3573 FEDORA:FEDORA-2010-16312  View
502519 46157 CVE-2010-3573 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049455.html  View
502520 46157 CVE-2010-3573 GENTOO:GLSA-201406-32  View
502521 46157 CVE-2010-3573 URL:http://security.gentoo.org/glsa/glsa-201406-32.xml  View
502522 46157 CVE-2010-3573 HP:HPSBUX02608  View
502523 46157 CVE-2010-3573 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c02616748  View
502524 46157 CVE-2010-3573 HP:SSRT100333  View
502525 46157 CVE-2010-3573 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c02616748  View
502526 46157 CVE-2010-3573 HP:HPSBMU02799  View
502527 46157 CVE-2010-3573 URL:http://marc.info/?l=bugtraq&m=134254866602253&w=2  View
502528 46157 CVE-2010-3573 REDHAT:RHSA-2010:0770  View
502529 46157 CVE-2010-3573 URL:http://www.redhat.com/support/errata/RHSA-2010-0770.html  View
502530 46157 CVE-2010-3573 REDHAT:RHSA-2010:0807  View
502531 46157 CVE-2010-3573 URL:http://www.redhat.com/support/errata/RHSA-2010-0807.html  View
502532 46157 CVE-2010-3573 REDHAT:RHSA-2010:0768  View
502533 46157 CVE-2010-3573 URL:http://www.redhat.com/support/errata/RHSA-2010-0768.html  View
502534 46157 CVE-2010-3573 REDHAT:RHSA-2010:0865  View
502535 46157 CVE-2010-3573 URL:http://www.redhat.com/support/errata/RHSA-2010-0865.html  View
502536 46157 CVE-2010-3573 REDHAT:RHSA-2010:0873  View
502537 46157 CVE-2010-3573 URL:http://www.redhat.com/support/errata/RHSA-2010-0873.html  View
502538 46157 CVE-2010-3573 REDHAT:RHSA-2010:0987  View
502539 46157 CVE-2010-3573 URL:http://www.redhat.com/support/errata/RHSA-2010-0987.html  View
502540 46157 CVE-2010-3573 REDHAT:RHSA-2011:0880  View
502541 46157 CVE-2010-3573 URL:http://www.redhat.com/support/errata/RHSA-2011-0880.html  View
502542 46157 CVE-2010-3573 SUSE:SUSE-SR:2010:019  View
502543 46157 CVE-2010-3573 URL:http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html  View
502544 46157 CVE-2010-3573 UBUNTU:USN-1010-1  View
502545 46157 CVE-2010-3573 URL:http://www.ubuntu.com/usn/USN-1010-1  View
502546 46157 CVE-2010-3573 OVAL:oval:org.mitre.oval:def:11990  View
502547 46157 CVE-2010-3573 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11990  View
502548 46157 CVE-2010-3573 OVAL:oval:org.mitre.oval:def:12220  View
502549 46157 CVE-2010-3573 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:12220  View
502550 46157 CVE-2010-3573 SECUNIA:41967  View
502551 46157 CVE-2010-3573 URL:http://secunia.com/advisories/41967  View
502552 46157 CVE-2010-3573 SECUNIA:41972  View
502553 46157 CVE-2010-3573 URL:http://secunia.com/advisories/41972  View
502554 46157 CVE-2010-3573 SECUNIA:42974  View
502555 46157 CVE-2010-3573 URL:http://secunia.com/advisories/42974  View
502556 46157 CVE-2010-3573 SECUNIA:44954  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
37396 JVNDB-2010-003181 Oracle OpenSolaris における Kernel/CIFS の処理に関する脆弱性 Oracle OpenSolaris は、Kernel/CIFS の処理に不備があるため、機密性および完全性に影響のある脆弱性が存在します。 CVE-2010-3577 46157 6.4 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003181.html  View