PT-2012-1723 · Oracle+3 · Oracle Virtualization+3

Published 2012-01-18 · Updated 2025-04-03 · CVE-2011-3571

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Low

Base vector

AV:N/AC:H/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle Virtualization version 3.2

Description The issue affects the confidentiality and integrity of the system, allowing remote authenticated users to exploit it via unknown vectors related to Session.

Recommendations For Oracle Virtualization version 3.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CESA-2012_0135

CVE-2011-3571

OPENSUSE-SU-2024:10534-1

RHSA-2012:0135

RHSA-2012:0139

RHSA-2012:0322

RHSA-2012_0135

RHSA-2012_0139

RHSA-2012_0322

Affected Products

Centos

Oracle Virtualization

Red Hat

Suse

References · 354

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/java_ws_vmargs.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_atomicreferencearray.rb · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0507 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-5035 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0506 · Security Note
• https://linux.oracle.com/errata/ELSA-2012-0135.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-3571 · Security Note
• http://security.gentoo.org/glsa/glsa-201406-32.xml · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0503 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0502 · Security Note
• http://oracle.com/technetwork/topics/security/cpujan2012-366304.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2012-10/msg00041.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3563 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3571 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0497 · Security Note