PT-2010-4922 · Oracle+2 · Oracle Java Se+4

Published 2010-10-13 · Updated 2018-10-10 · CVE-2010-3561

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 5.0 Update 25 through 6 Update 21 Java for Business versions 5.0 Update 25 through 6 Update 21

Description The issue affects the confidentiality, integrity, and availability of the system. It is related to the CORBA component and allows remote attackers to affect the system via unknown vectors. There are claims that this issue involves the use of the privileged accept method in the ServerSocket class, which does not limit which hosts can connect and allows remote attackers to bypass intended network access restrictions.

Recommendations For Oracle Java SE versions 5.0 Update 25 through 6 Update 21, update to a version that contains the fix for this issue. For Java for Business versions 5.0 Update 25 through 6 Update 21, update to a version that contains the fix for this issue. As a temporary workaround, consider restricting access to the CORBA component until a patch is available. Avoid using the accept method in the ServerSocket class without proper host connection limitations until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2010-3561

HPSBUX02608

RHSA-2010:0768

RHSA-2010:0770

RHSA-2010:0865

RHSA-2010_0768

RHSA-2010_0865

Affected Products

Hp-Ux

Java Platform

Java For Business

Oracle Java Se

Red Hat

References · 115

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/java_basicservice_impl.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/java_docbase_bof.rb · Exploit
• 🔥 https://github.com/johnwchadwick/cve-2009-3555-test-server · Exploit
• http://vupen.com/english/advisories/2010/3086 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3570 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3551 · Security Note
• https://bdu.fstec.ru/vul/2015-05274 · Security Note
• https://bdu.fstec.ru/vul/2015-05269 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3556 · Security Note
• http://security.gentoo.org/glsa/glsa-201406-32.xml · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-05279 · Security Note
• https://bdu.fstec.ru/vul/2015-09417 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3561 · Security Note
• https://bdu.fstec.ru/vul/2015-04270 · Security Note
• http://redhat.com/support/errata/RHSA-2010-0768.html · Vendor Advisory