Evaluator Impact

Per: http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html 'Oracle released a Java Critical Patch Update in October 2010 to address multiple vulnerabilities affecting the Java Runtime Environment. Oracle CVE-2010-3574 refers to the advisories that were applicable to JRockit from the Java Critical Patch Update. The CVSS score of this vulnerability CVE# reflects the highest among those fixed in JRockit. The complete list of all advisories addressed in JRockit under CVE-2010-3574 is as follows: CVE-2010-1321, CVE-2010-3541, CVE-2010-3548, CVE-2010-3549, CVE-2010-3551 CVE-2010-3553, CVE-2010-3554, CVE-2010-3555, CVE-2010-3556, CVE-2010-3557, CVE-2010-3559, CVE-2010-3561, CVE-2010-3562, CVE-2010-3565, CVE-2010-3566, CVE-2010-3567, CVE-2010-3568, CVE-2010-3569, CVE-2010-3571, CVE-2010-3572, CVE-2010-3573 and CVE-2010-3574.'

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

References to Check Content

Identifier:

oval:org.mitre.oval:def:12229

Check System:

http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:

http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:12229

Identifier:

oval:org.mitre.oval:def:12367

Check System:

http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:

http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:12367

Identifier:

oval:org.mitre.oval:def:12462

Check System:

http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:

http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:12462

Change History

OR
     *cpe:2.3:a:sun:jre:1.4.2:update2:*:*:*:*:*:*

OR
     *cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:sun:jre:1.4.2:update1:*:*:*:*:*:*

OR
     *cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:sun:jre:1.4.2:update7:*:*:*:*:*:*

OR
     *cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:sun:jre:1.4.2:update6:*:*:*:*:*:*

OR
     *cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:sun:jre:1.4.2:update5:*:*:*:*:*:*

OR
     *cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:sun:jre:1.4.2:update4:*:*:*:*:*:*

OR
     *cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:sun:jre:1.4.2:update3:*:*:*:*:*:*

OR
     *cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:sun:jre:1.4.2:update9:*:*:*:*:*:*

OR
     *cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:sun:jre:1.4.2:update8:*:*:*:*:*:*

OR
     *cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*

http://www.securityfocus.com/archive/1/516397/100/0/threaded [No Types Assigned]

http://www.securityfocus.com/archive/1/archive/1/516397/100/0/threaded [No Types Assigned]

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12367 [No Types Assigned]

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12462 [No Types Assigned]

http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:12367 [No Types Assigned]

http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:12462 [No Types Assigned]

Vulnerabilidad no especificada en el componente Networking en Oracle Java SE y Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27 y 1.3.1_28 permite a atacantes remotos afectar la confidencialidad, integridad y disponibilidad a través de vectores desconocidos. NOTA: la información previa fue obtenida de la CPU Octubre 2010. Oracle no ha comentado sobre las alegaciones de un proveedor downstream confiable de que HttpURLConnection no comprueba correctamente el permiso allowHttpTrace, lo que pe

Vulnerabilidad no especificada en el componente Networking de Oracle Java SE y Java for Business 6 Update 21, v5.0 Update 25, v1.4.2_27, y v1.3.1_28 permite a atacantes remotos afectar a la confidencialidad, integridad y disponibilidad a través de vectores desconocidos.

http://marc.info/?l=bugtraq&m=134254866602253&w=2