PT-2010-1916 · Oracle+2 · Java Se+5

Publicado 2010-04-01 · Atualizado 2018-10-10 · CVE-2010-0092

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Java SE versions 5.0 through 6 Update 18 Java for Business versions 5.0 through 6 Update 18

Description The issue affects the Java Runtime Environment component, allowing remote attackers to impact confidentiality, integrity, and availability through unknown vectors.

Recommendations For Java SE versions 5.0 through 6 Update 18, update to a version that contains a fix for this issue. For Java for Business versions 5.0 through 6 Update 18, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2010-0092

HPSBUX02524

RHSA-2010:0130

RHSA-2010:0337

RHSA-2010:0338

RHSA-2010:0339

RHSA-2010:0383

RHSA-2010:0471

RHSA-2010_0339

Produtos afetados

Hp-Ux

Java Platform

Java Runtime Environment

Java Se

Java For Business

Red Hat

Referências · 119

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_trusted_chain.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/java_mixer_sequencer.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_rmi_connection_impl.rb · Exploit
• 🔥 https://github.com/johnwchadwick/cve-2009-3555-test-server · Exploit
• https://bdu.fstec.ru/vul/2015-05274 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-05269 · Nota de Segurança
• http://secunia.com/advisories/39819 · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2010-0338.html · Aviso do Fabricante
• http://mandriva.com/security/advisories?name=MDVSA-2010:084 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-09417 · Nota de Segurança
• http://secunia.com/advisories/39317 · Aviso do Fabricante
• http://vupen.com/english/advisories/2010/1107 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-05271 · Nota de Segurança
• http://redhat.com/support/errata/RHSA-2010-0337.html · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0092 · Nota de Segurança