Home > Vulnerability Database > CVE-2010-3573

Mend.io Vulnerability Database

CVE-2010-3573

Date: October 19, 2010

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to missing validation of request headers in the HttpURLConnection class when they are set by applets, which allows remote attackers to bypass the intended security policy.

Severity Score

5.6

Related Resources (32)

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11990

Url: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c02616748

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12220

Url: http://support.avaya.com/css/P8/documents/100123193

Url: http://secunia.com/advisories/41967

Url: http://security.gentoo.org/glsa/glsa-201406-32.xml

Url: http://www.oracle.com/technetwork/topics/security/javacpuoct2010-176258.html

Url: http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049455.html

Url: http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html

Url: http://www.ubuntu.com/usn/USN-1010-1

Url: http://www.redhat.com/support/errata/RHSA-2010-0873.html

Url: http://www.redhat.com/support/errata/RHSA-2010-0987.html

Url: http://secunia.com/advisories/42974

Url: http://support.avaya.com/css/P8/documents/100114327

Url: http://secunia.com/advisories/44954

Url: https://nvd.nist.gov/vuln/detail/CVE-2010-3573

Url: http://marc.info/?l=bugtraq&m=134254866602253&w=2

Url: http://www.redhat.com/support/errata/RHSA-2010-0807.html

Url: http://www.vmware.com/security/advisories/VMSA-2011-0003.html

Url: http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html

Url: http://www.redhat.com/support/errata/RHSA-2010-0768.html

Url: https://access.redhat.com/security/cve/CVE-2010-3573

Url: http://www.redhat.com/support/errata/RHSA-2010-0865.html

Url: http://www.securityfocus.com/archive/1/516397/100/0/threaded

Url: http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049528.html

Url: http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049702.html

Url: http://www.redhat.com/support/errata/RHSA-2010-0770.html

Url: https://bugzilla.redhat.com/show_bug.cgi?id=642202

Url: http://www.redhat.com/support/errata/RHSA-2011-0880.html

Url: http://support.avaya.com/css/P8/documents/100114315

Url: http://secunia.com/advisories/41972

Url: https://www.mend.io/vulnerability-database/CVE-2010-3573

Severity Score

5.6

Weakness Type (CWE)

Insufficient Information

NVD-CWE-noinfo

CVSS v3.1

Base Score:	5.6
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW

CVSS v2

Base Score:	5.1
Access Vector (AV):	NETWORK
Access Complexity (AC):	HIGH
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2010-3573

Date: October 19, 2010

Severity Score

Related Resources (32)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?