PT-2011-1577 · Oracle+2 · Java Se+3

Published 2011-02-17 · Updated 2018-10-30 · CVE-2010-4473

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Java SE versions prior to 6 Update 24 Java SE versions prior to 5.0 Update 28 Java SE versions prior to 1.4.2 30

Description The issue affects confidentiality, integrity, and availability. It is related to Sound and unspecified APIs.

Recommendations For versions prior to 6 Update 24, update to version 6 Update 24 or later. For versions prior to 5.0 Update 28, update to version 5.0 Update 28 or later. For versions prior to 1.4.2 30, update to version 1.4.2 30 or later.

Exploit

Fix

Related Identifiers

CVE-2010-4473

HPSBUX02777

RHSA-2011:0282

RHSA-2011:0357

RHSA-2011:0364

RHSA-2011:0490

RHSA-2011:0870

RHSA-2011:0880

RHSA-2011_0282

RHSA-2011_0357

RHSA-2011_0364

Affected Products

Hp-Ux

Java Platform

Java Se

Red Hat

References · 78

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/ssl_version.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/java_codebase_trust.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/misc/java_rmi_server.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/java_rmi_server.rb · Exploit
• 🔥 https://github.com/mpgn/BEAST-PoC · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4448 · Security Note
• http://redhat.com/support/errata/RHSA-2011-0880.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0815 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00010.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0499 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2010-4473 · Security Note
• http://redhat.com/support/errata/RHSA-2011-0282.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3389 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0506 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0864 · Security Note