Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2010-3514 | First vendor Publication | 2010-10-13 |
| Vendor | Cve | Last vendor Modification | 2010-11-11 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:M/Au:N/C:N/I:P/A:N) | |||
|---|---|---|---|
| Cvss Base Score | 4.3 | Attack Range | Network |
| Cvss Impact Score | 2.9 | Attack Complexity | Medium |
| Cvss Expoit Score | 8.6 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Unspecified vulnerability in the Oracle iPlanet Web Server (Sun Java System Web Server) component in Oracle Sun Products Suite 6.1 and 7.0 allows remote attackers to affect integrity via unknown vectors related to Web Container. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3514 |
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 2 |
OpenVAS Exploits
| Date | Description |
|---|---|
| 2010-11-02 | Name : Oracle Java System Web Server HTTP Response Splitting Vulnerability File : nvt/gb_oracle_sjs_web_server_response_splitting_vuln.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 70024 | Oracle iPlanet Web Server Web Container Remote HTTP Header Insertion Oracle iPlanet Web Server contains a flaw related to the 'response.setHeader()' method failing to properly sanitise certain input before returning it to the user. This may allow a remote attacker to insert arbitrary HTTP headers in a response to the user. |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2010-12-13 | Name : The remote web server is affected by multiple vulnerabilities. File : sun_java_web_server_7_0_9.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
| Source | Url |
|---|---|
| CERT | http://www.us-cert.gov/cas/techalerts/TA10-287A.html |
| CONFIRM | http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html |
Alert History
| Date | Informations |
|---|---|
| 2021-05-04 12:12:26 |
|
| 2021-04-22 01:13:06 |
|
| 2020-05-23 00:26:31 |
|
| 2014-02-17 10:57:30 |
|
| 2013-05-10 23:32:56 |
|
