PT-2011-1577 · Oracle+2 · Java Se+3

Publicado 2011-02-17 · Atualizado 2018-10-30 · CVE-2010-4473

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Java SE versions prior to 6 Update 24 Java SE versions prior to 5.0 Update 28 Java SE versions prior to 1.4.2 30

Description The issue affects confidentiality, integrity, and availability. It is related to Sound and unspecified APIs.

Recommendations For versions prior to 6 Update 24, update to version 6 Update 24 or later. For versions prior to 5.0 Update 28, update to version 5.0 Update 28 or later. For versions prior to 1.4.2 30, update to version 1.4.2 30 or later.

Exploit

Correção

Identificadores relacionados

CVE-2010-4473

HPSBUX02777

RHSA-2011:0282

RHSA-2011:0357

RHSA-2011:0364

RHSA-2011:0490

RHSA-2011:0870

RHSA-2011:0880

RHSA-2011_0282

RHSA-2011_0357

RHSA-2011_0364

Produtos afetados

Hp-Ux

Java Platform

Java Se

Red Hat

Referências · 78

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/ssl_version.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/java_codebase_trust.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/misc/java_rmi_server.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/java_rmi_server.rb · Exploit
• 🔥 https://github.com/mpgn/BEAST-PoC · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4448 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2010-4448 · Nota
• http://redhat.com/support/errata/RHSA-2011-0880.html · Aviso do Fabricante
• http://secunia.com/advisories/49198 · Nota
• http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/action.process/public/kb/docDisplay/?javax.portlet.action=true&spf_p.tpst=kbDocDisplay&javax.portlet.begCacheTok=com.vignette.cachetoken&spf_p.prp_kbDocDisplay=wsrp-interactionState%3DdocId%253DZW1yX25hLWMwMzMxNjk4NQ%2525253D%2525253DhPsCeNc%257CdocLocale%253Den_US%257CcalledBy%253D&javax.portlet.endCacheTok=com.vignette.cachetoken · Nota
• https://access.redhat.com/security/cve/CVE-2010-4476 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12952 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0815 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2010-4451 · Nota
• http://secunia.com/advisories/44954 · Nota