CVE

Id
46169  
CVE No.
CVE-2010-3585  
Status
Candidate  
Description
Unspecified vulnerability in the OracleVM component in Oracle VM 2.2.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to ovs-agent. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a third party researcher that this is related to the exposure of unspecified functions using XML-RPC.  
Phase
Assigned (20100920)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
502652 46169 CVE-2010-3585 BUGTRAQ:20101102 [Onapsis Security Advisory 2010-008] Oracle Virtual Server Agent Arbitrary File Access  View
502653 46169 CVE-2010-3585 URL:http://www.securityfocus.com/archive/1/archive/1/514611/100/0/threaded  View
502654 46169 CVE-2010-3585 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html  View
502655 46169 CVE-2010-3585 CERT:TA10-287A  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30824 JVNDB-2011-001063 Oracle Applications の Oracle Application Object Library コンポーネントにおける脆弱性 Oracle Applications の Oracle Application Object Library コンポーネントには、Logout に関する処理に不備があるため、機密性および完全性に影響のある脆弱性が存在します。 CVE-2010-3589 46169 4 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001063.html  View