CVE-2010-3573
NoneCVSS
—
EPSS
10.6%
Published
Oct 19, 2010
CISA due date
—
The record
Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to missing validation of request headers in the HttpURLConnection class when they are set by applets, which allows remote attackers to bypass the intended security policy.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:enterprise_linux:5::client | java-1.6.0-openjdk | 0 | 1:1.6.0.0-1.16.b17.el5 |
| Red Hat:enterprise_linux:5::client | java-1.6.0-openjdk-debuginfo | 0 | 1:1.6.0.0-1.16.b17.el5 |
| Red Hat:enterprise_linux:5::client | java-1.6.0-openjdk-demo | 0 | 1:1.6.0.0-1.16.b17.el5 |
| Red Hat:enterprise_linux:5::client | java-1.6.0-openjdk-devel | 0 | 1:1.6.0.0-1.16.b17.el5 |
| Red Hat:enterprise_linux:5::client | java-1.6.0-openjdk-javadoc | 0 | 1:1.6.0.0-1.16.b17.el5 |
| Red Hat:enterprise_linux:5::client | java-1.6.0-openjdk-src | 0 | 1:1.6.0.0-1.16.b17.el5 |
| Red Hat:enterprise_linux:5::server | java-1.6.0-openjdk | 0 | 1:1.6.0.0-1.16.b17.el5 |
| Red Hat:enterprise_linux:5::server | java-1.6.0-openjdk-debuginfo | 0 | 1:1.6.0.0-1.16.b17.el5 |
| Red Hat:enterprise_linux:5::server | java-1.6.0-openjdk-demo | 0 | 1:1.6.0.0-1.16.b17.el5 |
| Red Hat:enterprise_linux:5::server | java-1.6.0-openjdk-devel | 0 | 1:1.6.0.0-1.16.b17.el5 |
| Red Hat:enterprise_linux:5::server | java-1.6.0-openjdk-javadoc | 0 | 1:1.6.0.0-1.16.b17.el5 |
| Red Hat:enterprise_linux:5::server | java-1.6.0-openjdk-src | 0 | 1:1.6.0.0-1.16.b17.el5 |
| Red Hat:enterprise_linux:6::client | java-1.6.0-openjdk | 0 | 1:1.6.0.0-1.31.b17.el6_0 |
| Red Hat:enterprise_linux:6::client | java-1.6.0-openjdk-debuginfo | 0 | 1:1.6.0.0-1.31.b17.el6_0 |
| Red Hat:enterprise_linux:6::client | java-1.6.0-openjdk-demo | 0 | 1:1.6.0.0-1.31.b17.el6_0 |
| Red Hat:enterprise_linux:6::client | java-1.6.0-openjdk-devel | 0 | 1:1.6.0.0-1.31.b17.el6_0 |
| Red Hat:enterprise_linux:6::client | java-1.6.0-openjdk-javadoc | 0 | 1:1.6.0.0-1.31.b17.el6_0 |
| Red Hat:enterprise_linux:6::client | java-1.6.0-openjdk-src | 0 | 1:1.6.0.0-1.31.b17.el6_0 |
| Red Hat:enterprise_linux:6::computenode | java-1.6.0-openjdk | 0 | 1:1.6.0.0-1.31.b17.el6_0 |
| Red Hat:enterprise_linux:6::computenode | java-1.6.0-openjdk-debuginfo | 0 | 1:1.6.0.0-1.31.b17.el6_0 |
| Red Hat:enterprise_linux:6::computenode | java-1.6.0-openjdk-demo | 0 | 1:1.6.0.0-1.31.b17.el6_0 |
| Red Hat:enterprise_linux:6::computenode | java-1.6.0-openjdk-devel | 0 | 1:1.6.0.0-1.31.b17.el6_0 |
| Red Hat:enterprise_linux:6::computenode | java-1.6.0-openjdk-javadoc | 0 | 1:1.6.0.0-1.31.b17.el6_0 |
| Red Hat:enterprise_linux:6::computenode | java-1.6.0-openjdk-src | 0 | 1:1.6.0.0-1.31.b17.el6_0 |
| Red Hat:enterprise_linux:6::server | java-1.6.0-openjdk | 0 | 1:1.6.0.0-1.31.b17.el6_0 |
| Red Hat:enterprise_linux:6::server | java-1.6.0-openjdk-debuginfo | 0 | 1:1.6.0.0-1.31.b17.el6_0 |
| Red Hat:enterprise_linux:6::server | java-1.6.0-openjdk-demo | 0 | 1:1.6.0.0-1.31.b17.el6_0 |
| Red Hat:enterprise_linux:6::server | java-1.6.0-openjdk-devel | 0 | 1:1.6.0.0-1.31.b17.el6_0 |
| Red Hat:enterprise_linux:6::server | java-1.6.0-openjdk-javadoc | 0 | 1:1.6.0.0-1.31.b17.el6_0 |
| Red Hat:enterprise_linux:6::server | java-1.6.0-openjdk-src | 0 | 1:1.6.0.0-1.31.b17.el6_0 |
| Red Hat:enterprise_linux:6::workstation | java-1.6.0-openjdk | 0 | 1:1.6.0.0-1.31.b17.el6_0 |
| Red Hat:enterprise_linux:6::workstation | java-1.6.0-openjdk-debuginfo | 0 | 1:1.6.0.0-1.31.b17.el6_0 |
| Red Hat:enterprise_linux:6::workstation | java-1.6.0-openjdk-demo | 0 | 1:1.6.0.0-1.31.b17.el6_0 |
| Red Hat:enterprise_linux:6::workstation | java-1.6.0-openjdk-devel | 0 | 1:1.6.0.0-1.31.b17.el6_0 |
| Red Hat:enterprise_linux:6::workstation | java-1.6.0-openjdk-javadoc | 0 | 1:1.6.0.0-1.31.b17.el6_0 |
| Red Hat:enterprise_linux:6::workstation | java-1.6.0-openjdk-src | 0 | 1:1.6.0.0-1.31.b17.el6_0 |
| Red Hat:network_satellite:5.4::el5 | java-1.6.0-ibm | 0 | 1:1.6.0.9.1-1jpp.1.el5 |
| Red Hat:network_satellite:5.4::el5 | java-1.6.0-ibm-devel | 0 | 1:1.6.0.9.1-1jpp.1.el5 |
| Red Hat:rhel_extras:4 | java-1.5.0-ibm | 0 | 1:1.5.0.12.2-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.5.0-ibm-demo | 0 | 1:1.5.0.12.2-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.5.0-ibm-devel | 0 | 1:1.5.0.12.2-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.5.0-ibm-javacomm | 0 | 1:1.5.0.12.2-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.5.0-ibm-jdbc | 0 | 1:1.5.0.12.2-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.5.0-ibm-plugin | 0 | 1:1.5.0.12.2-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.5.0-ibm-src | 0 | 1:1.5.0.12.2-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-ibm | 0 | 1:1.6.0.9.0-1jpp.3.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-ibm-demo | 0 | 1:1.6.0.9.0-1jpp.3.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-ibm-devel | 0 | 1:1.6.0.9.0-1jpp.3.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-ibm-javacomm | 0 | 1:1.6.0.9.0-1jpp.3.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-ibm-jdbc | 0 | 1:1.6.0.9.0-1jpp.3.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-ibm-plugin | 0 | 1:1.6.0.9.0-1jpp.3.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-ibm-src | 0 | 1:1.6.0.9.0-1jpp.3.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-sun | 0 | 1:1.6.0.22-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-sun-demo | 0 | 1:1.6.0.22-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-sun-devel | 0 | 1:1.6.0.22-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-sun-jdbc | 0 | 1:1.6.0.22-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-sun-plugin | 0 | 1:1.6.0.22-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.6.0-sun-src | 0 | 1:1.6.0.22-1jpp.1.el4 |
| Red Hat:rhel_extras:5::client | java-1.5.0-ibm | 0 | 1:1.5.0.12.2-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.5.0-ibm-accessibility | 0 | 1:1.5.0.12.2-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.5.0-ibm-demo | 0 | 1:1.5.0.12.2-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.5.0-ibm-devel | 0 | 1:1.5.0.12.2-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.5.0-ibm-javacomm | 0 | 1:1.5.0.12.2-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.5.0-ibm-jdbc | 0 | 1:1.5.0.12.2-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.5.0-ibm-plugin | 0 | 1:1.5.0.12.2-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.5.0-ibm-src | 0 | 1:1.5.0.12.2-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-ibm | 0 | 1:1.6.0.9.0-1jpp.3.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-ibm-accessibility | 0 | 1:1.6.0.9.0-1jpp.3.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-ibm-demo | 0 | 1:1.6.0.9.0-1jpp.3.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-ibm-devel | 0 | 1:1.6.0.9.0-1jpp.3.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-ibm-javacomm | 0 | 1:1.6.0.9.0-1jpp.3.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-ibm-jdbc | 0 | 1:1.6.0.9.0-1jpp.3.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-ibm-plugin | 0 | 1:1.6.0.9.0-1jpp.3.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-ibm-src | 0 | 1:1.6.0.9.0-1jpp.3.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-sun | 0 | 1:1.6.0.22-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-sun-demo | 0 | 1:1.6.0.22-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-sun-devel | 0 | 1:1.6.0.22-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-sun-jdbc | 0 | 1:1.6.0.22-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-sun-plugin | 0 | 1:1.6.0.22-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.6.0-sun-src | 0 | 1:1.6.0.22-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm | 0 | 1:1.5.0.12.2-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-accessibility | 0 | 1:1.5.0.12.2-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-demo | 0 | 1:1.5.0.12.2-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-devel | 0 | 1:1.5.0.12.2-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-javacomm | 0 | 1:1.5.0.12.2-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-jdbc | 0 | 1:1.5.0.12.2-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-plugin | 0 | 1:1.5.0.12.2-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-src | 0 | 1:1.5.0.12.2-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm | 0 | 1:1.6.0.9.0-1jpp.3.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-accessibility | 0 | 1:1.6.0.9.0-1jpp.3.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-demo | 0 | 1:1.6.0.9.0-1jpp.3.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-devel | 0 | 1:1.6.0.9.0-1jpp.3.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-javacomm | 0 | 1:1.6.0.9.0-1jpp.3.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-jdbc | 0 | 1:1.6.0.9.0-1jpp.3.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-plugin | 0 | 1:1.6.0.9.0-1jpp.3.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-ibm-src | 0 | 1:1.6.0.9.0-1jpp.3.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-sun | 0 | 1:1.6.0.22-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-sun-demo | 0 | 1:1.6.0.22-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-sun-devel | 0 | 1:1.6.0.22-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-sun-jdbc | 0 | 1:1.6.0.22-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-sun-plugin | 0 | 1:1.6.0.22-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.6.0-sun-src | 0 | 1:1.6.0.22-1jpp.1.el5 |
| Red Hat:rhel_extras:6 | java-1.5.0-ibm | 0 | 1:1.5.0.12.2-1jpp.1.el6 |
| Red Hat:rhel_extras:6 | java-1.5.0-ibm-demo | 0 | 1:1.5.0.12.2-1jpp.1.el6 |
| Red Hat:rhel_extras:6 | java-1.5.0-ibm-devel | 0 | 1:1.5.0.12.2-1jpp.1.el6 |
| Red Hat:rhel_extras:6 | java-1.5.0-ibm-javacomm | 0 | 1:1.5.0.12.2-1jpp.1.el6 |
| Red Hat:rhel_extras:6 | java-1.5.0-ibm-src | 0 | 1:1.5.0.12.2-1jpp.1.el6 |
| Red Hat:rhel_extras:6 | java-1.6.0-ibm | 0 | 1:1.6.0.9.0-1jpp.4.el6 |
| Red Hat:rhel_extras:6 | java-1.6.0-ibm-demo | 0 | 1:1.6.0.9.0-1jpp.4.el6 |
| Red Hat:rhel_extras:6 | java-1.6.0-ibm-devel | 0 | 1:1.6.0.9.0-1jpp.4.el6 |
| Red Hat:rhel_extras:6 | java-1.6.0-ibm-javacomm | 0 | 1:1.6.0.9.0-1jpp.4.el6 |
| Red Hat:rhel_extras:6 | java-1.6.0-ibm-jdbc | 0 | 1:1.6.0.9.0-1jpp.4.el6 |
| Red Hat:rhel_extras:6 | java-1.6.0-ibm-plugin | 0 | 1:1.6.0.9.0-1jpp.4.el6 |
| Red Hat:rhel_extras:6 | java-1.6.0-ibm-src | 0 | 1:1.6.0.9.0-1jpp.4.el6 |
Related vulnerabilities
- CVE-2016-5542 Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded… Also affects java-1.6.0-openjdk
- CVE-2016-3458 Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; and Java SE Embedded… Also affects java-1.6.0-openjdk
- CVE-2016-3427 Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77… Also affects java-1.6.0-openjdk
- CVE-2016-0686 Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded… Also affects java-1.6.0-openjdk
- CVE-2016-0483 Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65… Also affects java-1.6.0-openjdk
- CVE-2015-4734 Unspecified vulnerability in Oracle Java SE 6u101, 7u85 and 8u60, and Java SE Embedded… Also affects java-1.6.0-openjdk
- CVE-2015-4748 Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and… Also affects java-1.6.0-openjdk
- CVE-2015-2590 Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded… Also affects java-1.6.0-openjdk