CVE-2010-3549 Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, inte...
MediumCVSS 6.8
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is an HTTP request splitting vulnerability involving the handling of the chunked transfer encoding method by the HttpURLConnection class.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun jre | <= 1.6.0 | No fix listed |
| sun jre | = 1.6.0 | No fix listed |
| sun jre | = 1.6.0-update_1 | No fix listed |
| sun jre | = 1.6.0-update_10 | No fix listed |
| sun jre | = 1.6.0-update_11 | No fix listed |
| sun jre | = 1.6.0-update_12 | No fix listed |
| sun jre | = 1.6.0-update_13 | No fix listed |
| sun jre | = 1.6.0-update_14 | No fix listed |
| sun jre | = 1.6.0-update_15 | No fix listed |
| sun jre | = 1.6.0-update_16 | No fix listed |
| sun jre | = 1.6.0-update_17 | No fix listed |
| sun jre | = 1.6.0-update_18 | No fix listed |
| sun jre | = 1.6.0-update_19 | No fix listed |
| sun jre | = 1.6.0-update_2 | No fix listed |
| sun jre | = 1.6.0-update_20 | No fix listed |
| sun jre | = 1.6.0-update_3 | No fix listed |
| sun jre | = 1.6.0-update_4 | No fix listed |
| sun jre | = 1.6.0-update_5 | No fix listed |
| sun jre | = 1.6.0-update_6 | No fix listed |
| sun jre | = 1.6.0-update_7 | No fix listed |
| sun jre | <= 1.5.0 | No fix listed |
| sun jre | = 1.5.0 | No fix listed |
| sun jre | = 1.5.0-update1 | No fix listed |
| sun jre | = 1.5.0-update10 | No fix listed |
| sun jre | = 1.5.0-update11 | No fix listed |
Show 175 more
| Product | Affected versions | Fixed in |
|---|---|---|
| sun jre | = 1.5.0-update12 | No fix listed |
| sun jre | = 1.5.0-update13 | No fix listed |
| sun jre | = 1.5.0-update14 | No fix listed |
| sun jre | = 1.5.0-update15 | No fix listed |
| sun jre | = 1.5.0-update16 | No fix listed |
| sun jre | = 1.5.0-update17 | No fix listed |
| sun jre | = 1.5.0-update18 | No fix listed |
| sun jre | = 1.5.0-update19 | No fix listed |
| sun jre | = 1.5.0-update2 | No fix listed |
| sun jre | = 1.5.0-update20 | No fix listed |
| sun jre | = 1.5.0-update21 | No fix listed |
| sun jre | = 1.5.0-update22 | No fix listed |
| sun jre | = 1.5.0-update23 | No fix listed |
| sun jre | = 1.5.0-update24 | No fix listed |
| sun jre | = 1.5.0-update3 | No fix listed |
| sun jre | = 1.5.0-update4 | No fix listed |
| sun jre | = 1.5.0-update5 | No fix listed |
| sun jre | = 1.5.0-update6 | No fix listed |
| sun jre | = 1.5.0-update7 | No fix listed |
| sun jre | = 1.5.0-update8 | No fix listed |
| sun jre | = 1.5.0-update9 | No fix listed |
| sun jre | <= 1.4.2_27 | No fix listed |
| sun jre | = 1.4.2 | No fix listed |
| sun jre | = 1.4.2_1 | No fix listed |
| sun jre | = 1.4.2_2 | No fix listed |
| sun jre | = 1.4.2_3 | No fix listed |
| sun jre | = 1.4.2_4 | No fix listed |
| sun jre | = 1.4.2_5 | No fix listed |
| sun jre | = 1.4.2_6 | No fix listed |
| sun jre | = 1.4.2_7 | No fix listed |
| sun jre | = 1.4.2_8 | No fix listed |
| sun jre | = 1.4.2_9 | No fix listed |
| sun jre | = 1.4.2_10 | No fix listed |
| sun jre | = 1.4.2_11 | No fix listed |
| sun jre | = 1.4.2_12 | No fix listed |
| sun jre | = 1.4.2_13 | No fix listed |
| sun jre | = 1.4.2_14 | No fix listed |
| sun jre | = 1.4.2_15 | No fix listed |
| sun jre | = 1.4.2_16 | No fix listed |
| sun jre | = 1.4.2_17 | No fix listed |
| sun jre | = 1.4.2_18 | No fix listed |
| sun jre | = 1.4.2_19 | No fix listed |
| sun jre | = 1.4.2_20 | No fix listed |
| sun jre | = 1.4.2_21 | No fix listed |
| sun jre | = 1.4.2_22 | No fix listed |
| sun jre | = 1.4.2_23 | No fix listed |
| sun jre | = 1.4.2_24 | No fix listed |
| sun jre | = 1.4.2_25 | No fix listed |
| sun jre | = 1.4.2_26 | No fix listed |
| sun jre | <= 1.3.1_28 | No fix listed |
| sun jre | = 1.3.0 | No fix listed |
| sun jre | = 1.3.0-update1 | No fix listed |
| sun jre | = 1.3.0-update2 | No fix listed |
| sun jre | = 1.3.0-update3 | No fix listed |
| sun jre | = 1.3.0-update4 | No fix listed |
| sun jre | = 1.3.0-update5 | No fix listed |
| sun jre | = 1.3.1 | No fix listed |
| sun jre | = 1.3.1-update1 | No fix listed |
| sun jre | = 1.3.1-update2 | No fix listed |
| sun jre | = 1.3.1_2 | No fix listed |
| sun jre | = 1.3.1_03 | No fix listed |
| sun jre | = 1.3.1_04 | No fix listed |
| sun jre | = 1.3.1_05 | No fix listed |
| sun jre | = 1.3.1_06 | No fix listed |
| sun jre | = 1.3.1_07 | No fix listed |
| sun jre | = 1.3.1_08 | No fix listed |
| sun jre | = 1.3.1_09 | No fix listed |
| sun jre | = 1.3.1_10 | No fix listed |
| sun jre | = 1.3.1_11 | No fix listed |
| sun jre | = 1.3.1_12 | No fix listed |
| sun jre | = 1.3.1_13 | No fix listed |
| sun jre | = 1.3.1_14 | No fix listed |
| sun jre | = 1.3.1_15 | No fix listed |
| sun jre | = 1.3.1_16 | No fix listed |
| sun jre | = 1.3.1_17 | No fix listed |
| sun jre | = 1.3.1_18 | No fix listed |
| sun jre | = 1.3.1_19 | No fix listed |
| sun jre | = 1.3.1_20 | No fix listed |
| sun jre | = 1.3.1_21 | No fix listed |
| sun jre | = 1.3.1_22 | No fix listed |
| sun jre | = 1.3.1_23 | No fix listed |
| sun jre | = 1.3.1_24 | No fix listed |
| sun jre | = 1.3.1_25 | No fix listed |
| sun jre | = 1.3.1_26 | No fix listed |
| sun jre | = 1.3.1_27 | No fix listed |
| sun jdk | <= 1.6.0 | No fix listed |
| sun jdk | = 1.6.0 | No fix listed |
| sun jdk | = 1.6.0-update_10 | No fix listed |
| sun jdk | = 1.6.0-update_11 | No fix listed |
| sun jdk | = 1.6.0-update_12 | No fix listed |
| sun jdk | = 1.6.0-update_13 | No fix listed |
| sun jdk | = 1.6.0-update_14 | No fix listed |
| sun jdk | = 1.6.0-update_15 | No fix listed |
| sun jdk | = 1.6.0-update_16 | No fix listed |
| sun jdk | = 1.6.0-update_17 | No fix listed |
| sun jdk | = 1.6.0-update_18 | No fix listed |
| sun jdk | = 1.6.0-update_19 | No fix listed |
| sun jdk | = 1.6.0-update_20 | No fix listed |
| sun jdk | = 1.6.0-update_3 | No fix listed |
| sun jdk | = 1.6.0-update_4 | No fix listed |
| sun jdk | = 1.6.0-update_5 | No fix listed |
| sun jdk | = 1.6.0-update_6 | No fix listed |
| sun jdk | = 1.6.0-update_7 | No fix listed |
| sun jdk | = 1.6.0-update1 | No fix listed |
| sun jdk | = 1.6.0-update1_b06 | No fix listed |
| sun jdk | = 1.6.0-update2 | No fix listed |
| sun jdk | <= 1.5.0 | No fix listed |
| sun jdk | = 1.5.0 | No fix listed |
| sun jdk | = 1.5.0-update1 | No fix listed |
| sun jdk | = 1.5.0-update10 | No fix listed |
| sun jdk | = 1.5.0-update11 | No fix listed |
| sun jdk | = 1.5.0-update12 | No fix listed |
| sun jdk | = 1.5.0-update13 | No fix listed |
| sun jdk | = 1.5.0-update14 | No fix listed |
| sun jdk | = 1.5.0-update15 | No fix listed |
| sun jdk | = 1.5.0-update16 | No fix listed |
| sun jdk | = 1.5.0-update17 | No fix listed |
| sun jdk | = 1.5.0-update18 | No fix listed |
| sun jdk | = 1.5.0-update19 | No fix listed |
| sun jdk | = 1.5.0-update2 | No fix listed |
| sun jdk | = 1.5.0-update20 | No fix listed |
| sun jdk | = 1.5.0-update21 | No fix listed |
| sun jdk | = 1.5.0-update22 | No fix listed |
| sun jdk | = 1.5.0-update23 | No fix listed |
| sun jdk | = 1.5.0-update24 | No fix listed |
| sun jdk | = 1.5.0-update3 | No fix listed |
| sun jdk | = 1.5.0-update4 | No fix listed |
| sun jdk | = 1.5.0-update5 | No fix listed |
| sun jdk | = 1.5.0-update6 | No fix listed |
| sun jdk | = 1.5.0-update7 | No fix listed |
| sun jdk | = 1.5.0-update8 | No fix listed |
| sun jdk | = 1.5.0-update9 | No fix listed |
| sun jdk | <= 1.3.1_28 | No fix listed |
| sun jdk | = 1.3.0 | No fix listed |
| sun jdk | = 1.3.0_01 | No fix listed |
| sun jdk | = 1.3.0_02 | No fix listed |
| sun jdk | = 1.3.0_03 | No fix listed |
| sun jdk | = 1.3.0_04 | No fix listed |
| sun jdk | = 1.3.0_05 | No fix listed |
| sun jdk | = 1.3.1 | No fix listed |
| sun jdk | = 1.3.1_01 | No fix listed |
| sun jdk | = 1.3.1_01a | No fix listed |
| sun jdk | = 1.3.1_02 | No fix listed |
| sun jdk | = 1.3.1_03 | No fix listed |
| sun jdk | = 1.3.1_04 | No fix listed |
| sun jdk | = 1.3.1_05 | No fix listed |
| sun jdk | = 1.3.1_06 | No fix listed |
| sun jdk | = 1.3.1_07 | No fix listed |
| sun jdk | = 1.3.1_08 | No fix listed |
| sun jdk | = 1.3.1_09 | No fix listed |
| sun jdk | = 1.3.1_10 | No fix listed |
| sun jdk | = 1.3.1_11 | No fix listed |
| sun jdk | = 1.3.1_12 | No fix listed |
| sun jdk | = 1.3.1_13 | No fix listed |
| sun jdk | = 1.3.1_14 | No fix listed |
| sun jdk | = 1.3.1_15 | No fix listed |
| sun jdk | = 1.3.1_16 | No fix listed |
| sun jdk | = 1.3.1_17 | No fix listed |
| sun jdk | = 1.3.1_18 | No fix listed |
| sun jdk | = 1.3.1_19 | No fix listed |
| sun jdk | = 1.3.1_20 | No fix listed |
| sun jdk | = 1.3.1_21 | No fix listed |
| sun jdk | = 1.3.1_22 | No fix listed |
| sun jdk | = 1.3.1_23 | No fix listed |
| sun jdk | = 1.3.1_24 | No fix listed |
| sun jdk | = 1.3.1_25 | No fix listed |
| sun jdk | = 1.3.1_26 | No fix listed |
| sun jdk | = 1.3.1_27 | No fix listed |
| sun sdk | <= 1.4.2_27 | No fix listed |
| sun sdk | = 1.4.2 | No fix listed |
| sun sdk | = 1.4.2_1 | No fix listed |
| sun sdk | = 1.4.2_02 | No fix listed |
| sun sdk | = 1.4.2_3 | No fix listed |
| sun sdk | = 1.4.2_4 | No fix listed |
| sun sdk | = 1.4.2_5 | No fix listed |
References
- SSRT100333 vendor-advisory
- FEDORA-2010-16312 vendor-advisory
- FEDORA-2010-16294 vendor-advisory
- FEDORA-2010-16240 vendor-advisory
- SUSE-SR:2010:019 vendor-advisory
- SUSE-SA:2010:061 vendor-advisory
- HPSBMU02799 vendor-advisory
- 41967 third-party-advisory
- 41972 third-party-advisory
- 42974 third-party-advisory
- 44954 third-party-advisory
- GLSA-201406-32 vendor-advisory
- support.avaya.com
- support.avaya.com
- support.avaya.com
- www.oracle.com
- www.oracle.com patch vendor-advisory
- RHSA-2010:0768 vendor-advisory
- RHSA-2010:0770 vendor-advisory
- RHSA-2010:0786 vendor-advisory
- RHSA-2010:0807 vendor-advisory
- RHSA-2010:0865 vendor-advisory
- RHSA-2010:0873 vendor-advisory
- RHSA-2010:0986 vendor-advisory
- RHSA-2010:0987 vendor-advisory
- RHSA-2011:0880 vendor-advisory
- 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX mailing-list
- 44027 vdb-entry
- USN-1010-1 vendor-advisory
- www.vmware.com
- ADV-2010-2745 vdb-entry
- bugzilla.redhat.com
- oval:org.mitre.oval:def:11559 signature vdb-entry
- oval:org.mitre.oval:def:14340 signature vdb-entry