10 - CVE-2010-3574

Executive Summary

Informations
Name	CVE-2010-3574	First vendor Publication	2010-10-19
Vendor	Cve	Last vendor Modification	2018-10-30

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score	10	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that HttpURLConnection does not properly check for the allowHttpTrace permission, which allows untrusted code to perform HTTP TRACE requests.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3574

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:12229

Oval ID:	oval:org.mitre.oval:def:12229
Title:	DEPRECATED: Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 and earlier versions
Description:	Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that HttpURLConnection does not properly check for the allowHttpTrace permission, which allows untrusted code to perform HTTP TRACE requests.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-3574	Version:	6
Platform(s):	Microsoft Windows 2000 Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows XP	Product(s):	Oracle Java SE
Definition Synopsis:
Check if Java Development Kit is installed and version is less than or equal to 6.0.210.6 Java Development Kit is installed AND Check if Java Development Kit version is less than or equal to 1.6.0_21 ( 6.0.210.6) AND Java SE Development Kit 6 is installed OR Check if Java Runtime Environment is installed and version is less than or equal to 6.0.210.6 Java Runtime Environment is installed AND Check if Java Runtime Environment version is less than or equal to 1.6.0_21 (6.0.210.6) AND Java SE Runtime Environment 6 is installed

Definition Id: oval:org.mitre.oval:def:12367

Oval ID:	oval:org.mitre.oval:def:12367
Title:	Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 and earlier versions
Description:	Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that HttpURLConnection does not properly check for the allowHttpTrace permission, which allows untrusted code to perform HTTP TRACE requests.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-3574	Version:	11
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Development Kit Java Runtime Environment
Definition Synopsis:
JRE 5 Java SE Runtime Environment 5 is installed AND Determine if the version of Java Runtime Environment is less than 1.5.0:update26 AND JDK 5 Java SE Development Kit 5 is installed AND Determine if the version of Java Development Kit is less than 1.5.0:update26 AND JDK 6 Java SE Development Kit 6 is installed AND Check if Java Development Kit version is less than or equal to 1.6.0_21 (6.0.210.6) AND JRE 6 Java SE Runtime Environment 6 is installed AND Check if Java Runtime Environment version is less than or equal to 1.6.0_21 (6.0.210.6)

Definition Id: oval:org.mitre.oval:def:12462

Oval ID:	oval:org.mitre.oval:def:12462
Title:	HP-UX Running Java, Remote Execution of Arbitrary Code, Disclosure of Information, and Other Vulnerabilities.
Description:	Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that HttpURLConnection does not properly check for the allowHttpTrace permission, which allows untrusted code to perform HTTP TRACE requests.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-3574	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02608 platforms HP Release B.11.23 AND HP-UX B.11.31 AND HP Release B.11.11 AND filesets tests Jdk60.JDK60-PA20 version is less than 1.6.0.09.00 AND Jre60.JRE60-COM version is less than 1.6.0.09.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.09.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.09.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.09.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.09.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.09.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.09.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.09.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.09.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.09.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.09.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.09.00 AND Jdk60.JDK60-COM version is less than 1.6.0.09.00 OR Criteria meets HP Security Bulletin HPSBUX02608 platforms HP Release B.11.23 AND HP-UX B.11.31 AND HP Release B.11.11 AND filesets tests Jdk15.JDK15-IPF32 version is less than 1.5.0.21.00 AND Jre15.JRE15-COM version is less than 1.5.0.21.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.21.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.21.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.21.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.21.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.21.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.21.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.21.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.21.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.21.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.21.00 AND Jdk15.JDK15-COM version is less than 1.5.0.21.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.21.00 OR Criteria meets HP Security Bulletin HPSBUX02608 platforms HP Release B.11.23 AND HP-UX B.11.31 AND HP Release B.11.11 AND filesets tests Jdk14.JDK14-IPF32 version is less than 1.4.2.26.00 AND Jre14.JRE14-COM version is less than 1.4.2.26.00 AND Jdk14.JDK14-IPF64 version is less than 1.4.2.26.00 AND Jre14.JRE14-PA11 version is less than 1.4.2.26.00 AND Jdk14.JDK14-PA11 version is less than 1.4.2.26.00 AND Jdk14.JDK14-PA20 version is less than 1.4.2.26.00 AND Jre14.JRE14-PA11-HS version is less than 1.4.2.26.00 AND Jre14.JRE14-PA20 version is less than 1.4.2.26.00 AND Jdk14.JDK14-PA20W version is less than 1.4.2.26.00 AND Jre14.JRE14-PA20-HS version is less than 1.4.2.26.00 AND Jre14.JRE14-PA20W version is less than 1.4.2.26.00 AND Jre14.JRE14-PA20W-HS version is less than 1.4.2.26.00 AND Jre14.JRE14-IPF32 version is less than 1.4.2.26.00 AND Jre14.JRE14-IPF64-HS version is less than 1.4.2.26.00 AND Jre14.JRE14-IPF32-HS version is less than 1.4.2.26.00 AND Jre14.JRE14-IPF64 version is less than 1.4.2.26.00 AND Jdk14.JDK14-COM version is less than 1.4.2.26.00

Definition Id: oval:org.mitre.oval:def:13305

Oval ID:	oval:org.mitre.oval:def:13305
Title:	USN-1010-1 -- openjdk-6, openjdk-6b18 vulnerabilities
Description:	Marsh Ray and Steve Dispensa discovered a flaw in the TLS and SSLv3 protocols. If an attacker could perform a man in the middle attack at the start of a TLS connection, the attacker could inject arbitrary content at the beginning of the user�s session. USN-923-1 disabled SSL/TLS renegotiation by default; this update implements the TLS Renegotiation Indication Extension as defined in RFC 5746, and thus supports secure renegotiation between updated clients and servers. It was discovered that the HttpURLConnection class did not validate request headers set by java applets, which could allow an attacker to trigger actions otherwise not allowed to HTTP clients. It was discovered that JNDI could leak information that would allow an attacker to access information about otherwise-protected internal network names. It was discovered that HttpURLConnection improperly handled the "chunked" transfer encoding method, which could allow attackers to conduct HTTP response splitting attacks. It was discovered that the NetworkInterface class improperly checked the network "connect" permissions for local network addresses. This could allow an attacker to read local network addresses. It was discovered that UIDefault.ProxyLazyValue had unsafe reflection usage, allowing an attacker to create objects. It was discovered that multiple flaws in the CORBA reflection implementation could allow an attacker to execute arbitrary code by misusing permissions granted to certain system objects. It was discovered that unspecified flaws in the Swing library could allow untrusted applications to modify the behavior and state of certain JDK classes. It was discovered that the privileged accept method of the ServerSocket class in the CORBA implementation allowed it to receive connections from any host, instead of just the host of the current connection. An attacker could use this flaw to bypass restrictions defined by network permissions. It was discovered that there exists a double free in java�s indexColorModel that could allow an attacker to cause an applet or application to crash, or possibly execute arbitrary code with the privilege of the user running the java applet or application. It was discovered that the Kerberos implementation improperly checked AP-REQ requests, which could allow an attacker to cause a denial of service against the receiving JVM. It was discovered that improper checks of unspecified image metadata in JPEGImageWriter.writeImage of the imageio API could allow an attacker to execute arbitrary code with the privileges of the user running a java applet or application. It was discovered that an unspecified vulnerability in the ICC profile handling code could allow an attacker to execute arbitrary code with the privileges of the user running a java applet or application. It was discovered that a miscalculation in the OpenType font rendering implementation would allow out-of-bounds memory access. This could allow an attacker to execute arbitrary code with the privileges of the user running a java application. It was discovered that an unspecified race condition in the way objects were deserialized could allow an attacker to cause an applet or application to misuse the privileges of the user running the java applet or application. It was discovered that the defaultReadObject of the Serialization API could be tricked into setting a volatile field multiple times. This could allow an attacker to execute arbitrary code with the privileges of the user running a java applet or application. It was discovered that the HttpURLConnection class did not validate request headers set by java applets, which could allow an attacker to trigger actions otherwise not allowed to HTTP clients. It was discovered that the HttpURLConnection class improperly checked whether the calling code was granted the "allowHttpTrace" permission, allowing an attacker to create HTTP TRACE requests
Family:	unix	Class:	patch
Reference(s):	USN-1010-1 CVE-2009-3555 CVE-2010-3541 CVE-2010-3548 CVE-2010-3549 CVE-2010-3551 CVE-2010-3553 CVE-2010-3554 CVE-2010-3557 CVE-2010-3561 CVE-2010-3562 CVE-2010-3564 CVE-2010-3565 CVE-2010-3566 CVE-2010-3567 CVE-2010-3568 CVE-2010-3569 CVE-2010-3573 CVE-2010-3574	Version:	5
Platform(s):	Ubuntu 8.04 Ubuntu 10.10 Ubuntu 9.10 Ubuntu 10.04	Product(s):	openjdk-6 openjdk-6b18
Definition Synopsis:
Release section Ubuntu 8.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section openjdk-6-jre-lib DPKG is earlier than 6b18-1.8.2-4ubuntu1~8.04.1 AND openjdk-6-doc DPKG is earlier than 6b18-1.8.2-4ubuntu1~8.04.1 AND openjdk-6-source DPKG is earlier than 6b18-1.8.2-4ubuntu1~8.04.1 OR Architecture depended section Supported architectures section Installed architecture is powerpc AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is i386 AND Packages section openjdk-6-jre DPKG is earlier than 6b18-1.8.2-4ubuntu1~8.04.1 AND openjdk-6-jre-headless DPKG is earlier than 6b18-1.8.2-4ubuntu1~8.04.1 AND openjdk-6-demo DPKG is earlier than 6b18-1.8.2-4ubuntu1~8.04.1 AND openjdk-6-dbg DPKG is earlier than 6b18-1.8.2-4ubuntu1~8.04.1 AND openjdk-6-jdk DPKG is earlier than 6b18-1.8.2-4ubuntu1~8.04.1 AND icedtea6-plugin DPKG is earlier than 6b18-1.8.2-4ubuntu1~8.04.1 OR Release section Ubuntu 10.10 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section openjdk-6-jre-lib DPKG is earlier than 6b20-1.9.1-1ubuntu3 AND openjdk-6-doc DPKG is earlier than 6b20-1.9.1-1ubuntu3 AND openjdk-6-source DPKG is earlier than 6b20-1.9.1-1ubuntu3 OR Architecture depended section Supported architectures section Installed architecture is powerpc AND Installed architecture is amd64 AND Installed architecture is i386 AND Packages section icedtea-6-jre-cacao DPKG is earlier than 6b20-1.9.1-1ubuntu3 AND openjdk-6-jdk DPKG is earlier than 6b20-1.9.1-1ubuntu3 AND openjdk-6-jre DPKG is earlier than 6b20-1.9.1-1ubuntu3 AND openjdk-6-jre-headless DPKG is earlier than 6b20-1.9.1-1ubuntu3 AND openjdk-6-demo DPKG is earlier than 6b20-1.9.1-1ubuntu3 AND openjdk-6-dbg DPKG is earlier than 6b20-1.9.1-1ubuntu3 AND openjdk-6-jre-zero DPKG is earlier than 6b20-1.9.1-1ubuntu3 AND icedtea6-plugin DPKG is earlier than 6b20-1.9.1-1ubuntu3 OR Release section Ubuntu 9.10 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section openjdk-6-jre-lib DPKG is earlier than 6b18-1.8.2-4ubuntu1~9.10.1 AND openjdk-6-doc DPKG is earlier than 6b18-1.8.2-4ubuntu1~9.10.1 AND openjdk-6-source DPKG is earlier than 6b18-1.8.2-4ubuntu1~9.10.1 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section openjdk-6-jre DPKG is earlier than 6b18-1.8.2-4ubuntu1~9.10.1 AND openjdk-6-jre-headless DPKG is earlier than 6b18-1.8.2-4ubuntu1~9.10.1 AND openjdk-6-demo DPKG is earlier than 6b18-1.8.2-4ubuntu1~9.10.1 AND openjdk-6-dbg DPKG is earlier than 6b18-1.8.2-4ubuntu1~9.10.1 AND openjdk-6-jdk DPKG is earlier than 6b18-1.8.2-4ubuntu1~9.10.1 AND icedtea6-plugin DPKG is earlier than 6b18-1.8.2-4ubuntu1~9.10.1 OR Architecture depended section Supported architectures section Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc AND Packages section icedtea-6-jre-cacao DPKG is earlier than 6b18-1.8.2-4ubuntu1~9.10.1 AND openjdk-6-jre-zero DPKG is earlier than 6b18-1.8.2-4ubuntu1~9.10.1 OR Release section Ubuntu 10.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section openjdk-6-jre-lib DPKG is earlier than 6b18-1.8.2-4ubuntu2 AND openjdk-6-doc DPKG is earlier than 6b18-1.8.2-4ubuntu2 AND openjdk-6-source DPKG is earlier than 6b18-1.8.2-4ubuntu2 OR Architecture depended section Supported architectures section Installed architecture is sparc AND Installed architecture is powerpc AND Installed architecture is amd64 AND Installed architecture is i386 AND Packages section openjdk-6-jre DPKG is earlier than 6b18-1.8.2-4ubuntu2 AND openjdk-6-jre-headless DPKG is earlier than 6b18-1.8.2-4ubuntu2 AND openjdk-6-demo DPKG is earlier than 6b18-1.8.2-4ubuntu2 AND openjdk-6-dbg DPKG is earlier than 6b18-1.8.2-4ubuntu2 AND openjdk-6-jdk DPKG is earlier than 6b18-1.8.2-4ubuntu2 AND icedtea6-plugin DPKG is earlier than 6b18-1.8.2-4ubuntu2 OR Architecture depended section Supported architectures section Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is powerpc AND Packages section icedtea-6-jre-cacao DPKG is earlier than 6b18-1.8.2-4ubuntu2 AND openjdk-6-jre-zero DPKG is earlier than 6b18-1.8.2-4ubuntu2

Definition Id: oval:org.mitre.oval:def:20306

Oval ID:	oval:org.mitre.oval:def:20306
Title:	Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX
Description:	Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that HttpURLConnection does not properly check for the allowHttpTrace permission, which allows untrusted code to perform HTTP TRACE requests.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-3574	Version:	4
Platform(s):	VMWare ESX Server 4.0 VMWare ESX Server 4.1	Product(s):
Definition Synopsis:
Patch ESX400-201103403-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201103403-SG is not installed OR Patch ESX410-201110201-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201110201-SG is not installed

Definition Id: oval:org.mitre.oval:def:21498

Oval ID:	oval:org.mitre.oval:def:21498
Title:	RHSA-2011:0152: java-1.4.2-ibm security update (Moderate)
Description:	Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that HttpURLConnection does not properly check for the allowHttpTrace permission, which allows untrusted code to perform HTTP TRACE requests.
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:0152-01 CVE-2010-1321 CVE-2010-3574	Version:	29
Platform(s):	Red Hat Enterprise Linux 5	Product(s):	java-1.4.2-ibm
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 5 Packages section java-1.4.2-ibm is earlier than 0:1.4.2.13.8-1jpp.2.el5 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.13.8-1jpp.2.el5 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.13.8-1jpp.2.el5 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.13.8-1jpp.2.el5 AND java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.13.8-1jpp.2.el5 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.13.8-1jpp.2.el5 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.13.8-1jpp.2.el5

Definition Id: oval:org.mitre.oval:def:21716

Oval ID:	oval:org.mitre.oval:def:21716
Title:	RHSA-2010:0768: java-1.6.0-openjdk security and bug fix update (Important)
Description:	Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that HttpURLConnection does not properly check for the allowHttpTrace permission, which allows untrusted code to perform HTTP TRACE requests.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0768-01 CESA-2010:0768 CVE-2009-3555 CVE-2010-3541 CVE-2010-3548 CVE-2010-3549 CVE-2010-3551 CVE-2010-3553 CVE-2010-3554 CVE-2010-3557 CVE-2010-3561 CVE-2010-3562 CVE-2010-3564 CVE-2010-3565 CVE-2010-3567 CVE-2010-3568 CVE-2010-3569 CVE-2010-3573 CVE-2010-3574	Version:	224
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	java-1.6.0-openjdk
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.16.b17.el5 AND java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.16.b17.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.16.b17.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.16.b17.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.16.b17.el5

Definition Id: oval:org.mitre.oval:def:22124

Oval ID:	oval:org.mitre.oval:def:22124
Title:	RHSA-2010:0770: java-1.6.0-sun security update (Critical)
Description:	Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that HttpURLConnection does not properly check for the allowHttpTrace permission, which allows untrusted code to perform HTTP TRACE requests.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0770-01 CVE-2009-3555 CVE-2010-1321 CVE-2010-3541 CVE-2010-3548 CVE-2010-3549 CVE-2010-3550 CVE-2010-3551 CVE-2010-3552 CVE-2010-3553 CVE-2010-3554 CVE-2010-3555 CVE-2010-3556 CVE-2010-3557 CVE-2010-3558 CVE-2010-3559 CVE-2010-3560 CVE-2010-3561 CVE-2010-3562 CVE-2010-3563 CVE-2010-3565 CVE-2010-3566 CVE-2010-3567 CVE-2010-3568 CVE-2010-3569 CVE-2010-3570 CVE-2010-3571 CVE-2010-3572 CVE-2010-3573 CVE-2010-3574	Version:	380
Platform(s):	Red Hat Enterprise Linux 5	Product(s):	java-1.6.0-sun
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 5 Packages section java-1.6.0-sun-jdbc is earlier than 1:1.6.0.22-1jpp.1.el5 AND java-1.6.0-sun is earlier than 1:1.6.0.22-1jpp.1.el5 AND java-1.6.0-sun-demo is earlier than 1:1.6.0.22-1jpp.1.el5 AND java-1.6.0-sun-plugin is earlier than 1:1.6.0.22-1jpp.1.el5 AND java-1.6.0-sun-src is earlier than 1:1.6.0.22-1jpp.1.el5 AND java-1.6.0-sun-devel is earlier than 1:1.6.0.22-1jpp.1.el5

Definition Id: oval:org.mitre.oval:def:22284

Oval ID:	oval:org.mitre.oval:def:22284
Title:	RHSA-2010:0935: java-1.4.2-ibm security update (Moderate)
Description:	Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that HttpURLConnection does not properly check for the allowHttpTrace permission, which allows untrusted code to perform HTTP TRACE requests.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0935-01 CVE-2010-1321 CVE-2010-3574	Version:	29
Platform(s):	Red Hat Enterprise Linux 5	Product(s):	java-1.4.2-ibm
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 5 Packages section java-1.4.2-ibm is earlier than 0:1.4.2.13.7-1jpp.3.el5 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.13.7-1jpp.3.el5 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.13.7-1jpp.3.el5 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.13.7-1jpp.3.el5 AND java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.13.7-1jpp.3.el5 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.13.7-1jpp.3.el5 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.13.7-1jpp.3.el5

Definition Id: oval:org.mitre.oval:def:22285

Oval ID:	oval:org.mitre.oval:def:22285
Title:	RHSA-2010:0865: java-1.6.0-openjdk security and bug fix update (Important)
Description:	Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that HttpURLConnection does not properly check for the allowHttpTrace permission, which allows untrusted code to perform HTTP TRACE requests.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0865-02 CVE-2009-3555 CVE-2010-3541 CVE-2010-3548 CVE-2010-3549 CVE-2010-3551 CVE-2010-3553 CVE-2010-3554 CVE-2010-3557 CVE-2010-3561 CVE-2010-3562 CVE-2010-3564 CVE-2010-3565 CVE-2010-3567 CVE-2010-3568 CVE-2010-3569 CVE-2010-3573 CVE-2010-3574	Version:	224
Platform(s):	Red Hat Enterprise Linux 6	Product(s):	java-1.6.0-openjdk
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 6 Packages section java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.31.b17.el6_0 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.31.b17.el6_0 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.31.b17.el6_0 AND java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.31.b17.el6_0 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.31.b17.el6_0

Definition Id: oval:org.mitre.oval:def:22313

Oval ID:	oval:org.mitre.oval:def:22313
Title:	RHSA-2010:0987: java-1.6.0-ibm security and bug fix update (Critical)
Description:	Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that HttpURLConnection does not properly check for the allowHttpTrace permission, which allows untrusted code to perform HTTP TRACE requests.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0987-01 CVE-2009-3555 CVE-2010-1321 CVE-2010-3541 CVE-2010-3548 CVE-2010-3549 CVE-2010-3550 CVE-2010-3551 CVE-2010-3553 CVE-2010-3555 CVE-2010-3556 CVE-2010-3557 CVE-2010-3558 CVE-2010-3560 CVE-2010-3562 CVE-2010-3563 CVE-2010-3565 CVE-2010-3566 CVE-2010-3568 CVE-2010-3569 CVE-2010-3571 CVE-2010-3572 CVE-2010-3573 CVE-2010-3574	Version:	302
Platform(s):	Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 6	Product(s):	java-1.6.0-ibm
Definition Synopsis:
Operation system section The operating system installed on the system is Red Hat Enterprise Linux 5 Packages section java-1.6.0-ibm-devel is earlier than 1:1.6.0.9.0-1jpp.3.el5 AND java-1.6.0-ibm-src is earlier than 1:1.6.0.9.0-1jpp.3.el5 AND java-1.6.0-ibm-javacomm is earlier than 1:1.6.0.9.0-1jpp.3.el5 AND java-1.6.0-ibm-accessibility is earlier than 1:1.6.0.9.0-1jpp.3.el5 AND java-1.6.0-ibm-plugin is earlier than 1:1.6.0.9.0-1jpp.3.el5 AND java-1.6.0-ibm-jdbc is earlier than 1:1.6.0.9.0-1jpp.3.el5 AND java-1.6.0-ibm is earlier than 1:1.6.0.9.0-1jpp.3.el5 AND java-1.6.0-ibm-demo is earlier than 1:1.6.0.9.0-1jpp.3.el5 AND Operation system section The operating system installed on the system is Red Hat Enterprise Linux 6 Packages section java-1.6.0-ibm-devel is earlier than 1:1.6.0.9.0-1jpp.4.el6 AND java-1.6.0-ibm-src is earlier than 1:1.6.0.9.0-1jpp.4.el6 AND java-1.6.0-ibm-javacomm is earlier than 1:1.6.0.9.0-1jpp.4.el6 AND java-1.6.0-ibm-plugin is earlier than 1:1.6.0.9.0-1jpp.4.el6 AND java-1.6.0-ibm-jdbc is earlier than 1:1.6.0.9.0-1jpp.4.el6 AND java-1.6.0-ibm is earlier than 1:1.6.0.9.0-1jpp.4.el6 AND java-1.6.0-ibm-demo is earlier than 1:1.6.0.9.0-1jpp.4.el6

Definition Id: oval:org.mitre.oval:def:22342

Oval ID:	oval:org.mitre.oval:def:22342
Title:	RHSA-2010:0873: java-1.5.0-ibm security update (Critical)
Description:	Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that HttpURLConnection does not properly check for the allowHttpTrace permission, which allows untrusted code to perform HTTP TRACE requests.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0873-02 CVE-2010-1321 CVE-2010-3541 CVE-2010-3548 CVE-2010-3549 CVE-2010-3550 CVE-2010-3551 CVE-2010-3556 CVE-2010-3559 CVE-2010-3562 CVE-2010-3565 CVE-2010-3566 CVE-2010-3568 CVE-2010-3569 CVE-2010-3572 CVE-2010-3573 CVE-2010-3574	Version:	211
Platform(s):	Red Hat Enterprise Linux 6	Product(s):	java-1.5.0-ibm
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 6 Packages section java-1.5.0-ibm-devel is earlier than 1:1.5.0.12.2-1jpp.1.el6 AND java-1.5.0-ibm is earlier than 1:1.5.0.12.2-1jpp.1.el6 AND java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.12.2-1jpp.1.el6 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.12.2-1jpp.1.el6 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.12.2-1jpp.1.el6 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.12.2-1jpp.1.el6 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.12.2-1jpp.1.el6

Definition Id: oval:org.mitre.oval:def:22361

Oval ID:	oval:org.mitre.oval:def:22361
Title:	RHSA-2010:0807: java-1.5.0-ibm security update (Critical)
Description:	Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that HttpURLConnection does not properly check for the allowHttpTrace permission, which allows untrusted code to perform HTTP TRACE requests.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0807-01 CVE-2009-3555 CVE-2010-1321 CVE-2010-3541 CVE-2010-3548 CVE-2010-3549 CVE-2010-3550 CVE-2010-3551 CVE-2010-3556 CVE-2010-3559 CVE-2010-3562 CVE-2010-3565 CVE-2010-3566 CVE-2010-3568 CVE-2010-3569 CVE-2010-3572 CVE-2010-3573 CVE-2010-3574	Version:	224
Platform(s):	Red Hat Enterprise Linux 5	Product(s):	java-1.5.0-ibm
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 5 Packages section java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.12.2-1jpp.1.el5 AND java-1.5.0-ibm is earlier than 1:1.5.0.12.2-1jpp.1.el5 AND java-1.5.0-ibm-accessibility is earlier than 1:1.5.0.12.2-1jpp.1.el5 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.12.2-1jpp.1.el5 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.12.2-1jpp.1.el5 AND java-1.5.0-ibm-devel is earlier than 1:1.5.0.12.2-1jpp.1.el5 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.12.2-1jpp.1.el5 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.12.2-1jpp.1.el5

Definition Id: oval:org.mitre.oval:def:22816

Oval ID:	oval:org.mitre.oval:def:22816
Title:	ELSA-2011:0152: java-1.4.2-ibm security update (Moderate)
Description:	Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that HttpURLConnection does not properly check for the allowHttpTrace permission, which allows untrusted code to perform HTTP TRACE requests.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:0152-01 CVE-2010-1321 CVE-2010-3574	Version:	13
Platform(s):	Oracle Linux 5	Product(s):	java-1.4.2-ibm
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.4.2-ibm is earlier than 0:1.4.2.13.8-1jpp.2.el5 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.13.8-1jpp.2.el5 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.13.8-1jpp.2.el5 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.13.8-1jpp.2.el5 AND java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.13.8-1jpp.2.el5 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.13.8-1jpp.2.el5 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.13.8-1jpp.2.el5

Definition Id: oval:org.mitre.oval:def:22873

Oval ID:	oval:org.mitre.oval:def:22873
Title:	ELSA-2010:0807: java-1.5.0-ibm security update (Critical)
Description:	Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that HttpURLConnection does not properly check for the allowHttpTrace permission, which allows untrusted code to perform HTTP TRACE requests.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0807-01 CVE-2009-3555 CVE-2010-1321 CVE-2010-3541 CVE-2010-3548 CVE-2010-3549 CVE-2010-3550 CVE-2010-3551 CVE-2010-3556 CVE-2010-3559 CVE-2010-3562 CVE-2010-3565 CVE-2010-3566 CVE-2010-3568 CVE-2010-3569 CVE-2010-3572 CVE-2010-3573 CVE-2010-3574	Version:	73
Platform(s):	Oracle Linux 5	Product(s):	java-1.5.0-ibm
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.12.2-1jpp.1.el5 AND java-1.5.0-ibm is earlier than 1:1.5.0.12.2-1jpp.1.el5 AND java-1.5.0-ibm-accessibility is earlier than 1:1.5.0.12.2-1jpp.1.el5 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.12.2-1jpp.1.el5 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.12.2-1jpp.1.el5 AND java-1.5.0-ibm-devel is earlier than 1:1.5.0.12.2-1jpp.1.el5 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.12.2-1jpp.1.el5 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.12.2-1jpp.1.el5

Definition Id: oval:org.mitre.oval:def:22954

Oval ID:	oval:org.mitre.oval:def:22954
Title:	ELSA-2010:0770: java-1.6.0-sun security update (Critical)
Description:	Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that HttpURLConnection does not properly check for the allowHttpTrace permission, which allows untrusted code to perform HTTP TRACE requests.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0770-01 CVE-2009-3555 CVE-2010-1321 CVE-2010-3541 CVE-2010-3548 CVE-2010-3549 CVE-2010-3550 CVE-2010-3551 CVE-2010-3552 CVE-2010-3553 CVE-2010-3554 CVE-2010-3555 CVE-2010-3556 CVE-2010-3557 CVE-2010-3558 CVE-2010-3559 CVE-2010-3560 CVE-2010-3561 CVE-2010-3562 CVE-2010-3563 CVE-2010-3565 CVE-2010-3566 CVE-2010-3567 CVE-2010-3568 CVE-2010-3569 CVE-2010-3570 CVE-2010-3571 CVE-2010-3572 CVE-2010-3573 CVE-2010-3574	Version:	121
Platform(s):	Oracle Linux 5	Product(s):	java-1.6.0-sun
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.6.0-sun-jdbc is earlier than 1:1.6.0.22-1jpp.1.el5 AND java-1.6.0-sun is earlier than 1:1.6.0.22-1jpp.1.el5 AND java-1.6.0-sun-demo is earlier than 1:1.6.0.22-1jpp.1.el5 AND java-1.6.0-sun-plugin is earlier than 1:1.6.0.22-1jpp.1.el5 AND java-1.6.0-sun-src is earlier than 1:1.6.0.22-1jpp.1.el5 AND java-1.6.0-sun-devel is earlier than 1:1.6.0.22-1jpp.1.el5

Definition Id: oval:org.mitre.oval:def:22962

Oval ID:	oval:org.mitre.oval:def:22962
Title:	ELSA-2010:0768: java-1.6.0-openjdk security and bug fix update (Important)
Description:	Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that HttpURLConnection does not properly check for the allowHttpTrace permission, which allows untrusted code to perform HTTP TRACE requests.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0768-01 CVE-2009-3555 CVE-2010-3541 CVE-2010-3548 CVE-2010-3549 CVE-2010-3551 CVE-2010-3553 CVE-2010-3554 CVE-2010-3557 CVE-2010-3561 CVE-2010-3562 CVE-2010-3564 CVE-2010-3565 CVE-2010-3567 CVE-2010-3568 CVE-2010-3569 CVE-2010-3573 CVE-2010-3574	Version:	73
Platform(s):	Oracle Linux 5	Product(s):	java-1.6.0-openjdk
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.16.b17.el5 AND java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.16.b17.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.16.b17.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.16.b17.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.16.b17.el5

Definition Id: oval:org.mitre.oval:def:23199

Oval ID:	oval:org.mitre.oval:def:23199
Title:	DEPRECATED: ELSA-2010:0987: java-1.6.0-ibm security and bug fix update (Critical)
Description:	Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that HttpURLConnection does not properly check for the allowHttpTrace permission, which allows untrusted code to perform HTTP TRACE requests.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0987-01 CVE-2009-3555 CVE-2010-1321 CVE-2010-3541 CVE-2010-3548 CVE-2010-3549 CVE-2010-3550 CVE-2010-3551 CVE-2010-3553 CVE-2010-3555 CVE-2010-3556 CVE-2010-3557 CVE-2010-3558 CVE-2010-3560 CVE-2010-3562 CVE-2010-3563 CVE-2010-3565 CVE-2010-3566 CVE-2010-3568 CVE-2010-3569 CVE-2010-3571 CVE-2010-3572 CVE-2010-3573 CVE-2010-3574	Version:	98
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	java-1.6.0-ibm
Definition Synopsis:
rpm test Oracle Linux 5.x AND rpm test java-1.6.0-ibm-devel is earlier than 1:1.6.0.9.0-1jpp.3.el5 AND java-1.6.0-ibm-src is earlier than 1:1.6.0.9.0-1jpp.3.el5 AND java-1.6.0-ibm-javacomm is earlier than 1:1.6.0.9.0-1jpp.3.el5 AND java-1.6.0-ibm-accessibility is earlier than 1:1.6.0.9.0-1jpp.3.el5 AND java-1.6.0-ibm-plugin is earlier than 1:1.6.0.9.0-1jpp.3.el5 AND java-1.6.0-ibm-jdbc is earlier than 1:1.6.0.9.0-1jpp.3.el5 AND java-1.6.0-ibm is earlier than 1:1.6.0.9.0-1jpp.3.el5 AND java-1.6.0-ibm-demo is earlier than 1:1.6.0.9.0-1jpp.3.el5 OR rpm test Oracle Linux 6.x AND rpm test java-1.6.0-ibm-devel is earlier than 1:1.6.0.9.0-1jpp.4.el6 AND java-1.6.0-ibm-src is earlier than 1:1.6.0.9.0-1jpp.4.el6 AND java-1.6.0-ibm-javacomm is earlier than 1:1.6.0.9.0-1jpp.4.el6 AND java-1.6.0-ibm-plugin is earlier than 1:1.6.0.9.0-1jpp.4.el6 AND java-1.6.0-ibm-jdbc is earlier than 1:1.6.0.9.0-1jpp.4.el6 AND java-1.6.0-ibm is earlier than 1:1.6.0.9.0-1jpp.4.el6 AND java-1.6.0-ibm-demo is earlier than 1:1.6.0.9.0-1jpp.4.el6

Definition Id: oval:org.mitre.oval:def:23245

Oval ID:	oval:org.mitre.oval:def:23245
Title:	ELSA-2010:0935: java-1.4.2-ibm security update (Moderate)
Description:	Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that HttpURLConnection does not properly check for the allowHttpTrace permission, which allows untrusted code to perform HTTP TRACE requests.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0935-01 CVE-2010-1321 CVE-2010-3574	Version:	13
Platform(s):	Oracle Linux 5	Product(s):	java-1.4.2-ibm
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.4.2-ibm is earlier than 0:1.4.2.13.7-1jpp.3.el5 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.13.7-1jpp.3.el5 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.13.7-1jpp.3.el5 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.13.7-1jpp.3.el5 AND java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.13.7-1jpp.3.el5 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.13.7-1jpp.3.el5 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.13.7-1jpp.3.el5

Definition Id: oval:org.mitre.oval:def:23453

Oval ID:	oval:org.mitre.oval:def:23453
Title:	ELSA-2010:0987: java-1.6.0-ibm security and bug fix update (Critical)
Description:	Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that HttpURLConnection does not properly check for the allowHttpTrace permission, which allows untrusted code to perform HTTP TRACE requests.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0987-01 CVE-2009-3555 CVE-2010-1321 CVE-2010-3541 CVE-2010-3548 CVE-2010-3549 CVE-2010-3550 CVE-2010-3551 CVE-2010-3553 CVE-2010-3555 CVE-2010-3556 CVE-2010-3557 CVE-2010-3558 CVE-2010-3560 CVE-2010-3562 CVE-2010-3563 CVE-2010-3565 CVE-2010-3566 CVE-2010-3568 CVE-2010-3569 CVE-2010-3571 CVE-2010-3572 CVE-2010-3573 CVE-2010-3574	Version:	97
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	java-1.6.0-ibm
Definition Synopsis:
rpm test Oracle Linux 5.x AND rpm test java-1.6.0-ibm-devel is earlier than 1:1.6.0.9.0-1jpp.3.el5 AND java-1.6.0-ibm-src is earlier than 1:1.6.0.9.0-1jpp.3.el5 AND java-1.6.0-ibm-javacomm is earlier than 1:1.6.0.9.0-1jpp.3.el5 AND java-1.6.0-ibm-accessibility is earlier than 1:1.6.0.9.0-1jpp.3.el5 AND java-1.6.0-ibm-plugin is earlier than 1:1.6.0.9.0-1jpp.3.el5 AND java-1.6.0-ibm-jdbc is earlier than 1:1.6.0.9.0-1jpp.3.el5 AND java-1.6.0-ibm is earlier than 1:1.6.0.9.0-1jpp.3.el5 AND java-1.6.0-ibm-demo is earlier than 1:1.6.0.9.0-1jpp.3.el5 OR rpm test Oracle Linux 6.x AND rpm test java-1.6.0-ibm-devel is earlier than 1:1.6.0.9.0-1jpp.4.el6 AND java-1.6.0-ibm-src is earlier than 1:1.6.0.9.0-1jpp.4.el6 AND java-1.6.0-ibm-javacomm is earlier than 1:1.6.0.9.0-1jpp.4.el6 AND java-1.6.0-ibm-plugin is earlier than 1:1.6.0.9.0-1jpp.4.el6 AND java-1.6.0-ibm-jdbc is earlier than 1:1.6.0.9.0-1jpp.4.el6 AND java-1.6.0-ibm is earlier than 1:1.6.0.9.0-1jpp.4.el6 AND java-1.6.0-ibm-demo is earlier than 1:1.6.0.9.0-1jpp.4.el6

Definition Id: oval:org.mitre.oval:def:23563

Oval ID:	oval:org.mitre.oval:def:23563
Title:	ELSA-2010:0865: java-1.6.0-openjdk security and bug fix update (Important)
Description:	Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that HttpURLConnection does not properly check for the allowHttpTrace permission, which allows untrusted code to perform HTTP TRACE requests.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0865-02 CVE-2009-3555 CVE-2010-3541 CVE-2010-3548 CVE-2010-3549 CVE-2010-3551 CVE-2010-3553 CVE-2010-3554 CVE-2010-3557 CVE-2010-3561 CVE-2010-3562 CVE-2010-3564 CVE-2010-3565 CVE-2010-3567 CVE-2010-3568 CVE-2010-3569 CVE-2010-3573 CVE-2010-3574	Version:	73
Platform(s):	Oracle Linux 6	Product(s):	java-1.6.0-openjdk
Definition Synopsis:
Oracle Linux 6.x rpm test java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.31.b17.el6_0 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.31.b17.el6_0 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.31.b17.el6_0 AND java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.31.b17.el6_0 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.31.b17.el6_0

Definition Id: oval:org.mitre.oval:def:23606

Oval ID:	oval:org.mitre.oval:def:23606
Title:	ELSA-2010:0873: java-1.5.0-ibm security update (Critical)
Description:	Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that HttpURLConnection does not properly check for the allowHttpTrace permission, which allows untrusted code to perform HTTP TRACE requests.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0873-02 CVE-2010-1321 CVE-2010-3541 CVE-2010-3548 CVE-2010-3549 CVE-2010-3550 CVE-2010-3551 CVE-2010-3556 CVE-2010-3559 CVE-2010-3562 CVE-2010-3565 CVE-2010-3566 CVE-2010-3568 CVE-2010-3569 CVE-2010-3572 CVE-2010-3573 CVE-2010-3574	Version:	69
Platform(s):	Oracle Linux 6	Product(s):	java-1.5.0-ibm
Definition Synopsis:
Oracle Linux 6.x rpm test java-1.5.0-ibm-devel is earlier than 1:1.5.0.12.2-1jpp.1.el6 AND java-1.5.0-ibm is earlier than 1:1.5.0.12.2-1jpp.1.el6 AND java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.12.2-1jpp.1.el6 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.12.2-1jpp.1.el6 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.12.2-1jpp.1.el6 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.12.2-1jpp.1.el6 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.12.2-1jpp.1.el6

CPE : Common Platform Enumeration

Type	Description	Count
Application	Sun Jdk cpe:2.3:a:sun:jdk:1.6.0:update_4:::::: cpe:2.3:a:sun:jdk:1.6.0:update_18:::::: cpe:2.3:a:sun:jdk:1.6.0:update1:::::: cpe:2.3:a:sun:jdk:1.6.0:update1_b06:::::: cpe:2.3:a:sun:jdk:1.6.0:update2:::::: cpe:2.3:a:sun:jdk:1.6.0:update_14:::::: cpe:2.3:a:sun:jdk:1.6.0:update_10:::::: cpe:2.3:a:sun:jdk:1.6.0:update_7:::::: cpe:2.3:a:sun:jdk:1.6.0:update_17:::::: cpe:2.3:a:sun:jdk:1.6.0:update_13:::::: cpe:2.3:a:sun:jdk:1.6.0:update_6:::::: cpe:2.3:a:sun:jdk:1.6.0:update_20:::::: cpe:2.3:a:sun:jdk:1.6.0:update_5:::::: cpe:2.3:a:sun:jdk:1.6.0:update_16:::::: cpe:2.3:a:sun:jdk:1.6.0:update_3:::::: cpe:2.3:a:sun:jdk:1.6.0:update_19:::::: cpe:2.3:a:sun:jdk:1.6.0:update_15:::::: cpe:2.3:a:sun:jdk:1.6.0:update_21:::::: cpe:2.3:a:sun:jdk:1.6.0:update_12:::::: cpe:2.3:a:sun:jdk:1.6.0:update_11:::::: cpe:2.3:a:sun:jdk:1.6.0:update9:::::: cpe:2.3:a:sun:jdk:1.6.0:update10:::::: cpe:2.3:a:sun:jdk:1.6.0:update14:::::: cpe:2.3:a:sun:jdk:1.6.0:update6:::::: cpe:2.3:a:sun:jdk:1.6.0:update11:::::: cpe:2.3:a:sun:jdk:1.6.0:update3:::::: cpe:2.3:a:sun:jdk:1.6.0:update5:::::: cpe:2.3:a:sun:jdk:1.6.0:update13:::::: cpe:2.3:a:sun:jdk:1.6.0:update12:::::: cpe:2.3:a:sun:jdk:1.6.0:update4:::::: cpe:2.3:a:sun:jdk:1.6.0:update15:::::: cpe:2.3:a:sun:jdk:1.6.0:update7:::::: cpe:2.3:a:sun:jdk:1.6.0:update8:::::: cpe:2.3:a:sun:jdk:1.6.0:update16:::::: cpe:2.3:a:sun:jdk:1.6.0:update_8:::::: cpe:2.3:a:sun:jdk:1.6.0:update_1:::::: cpe:2.3:a:sun:jdk:1.6.0:update_9:::::: cpe:2.3:a:sun:jdk:1.6.0:update18:::::: cpe:2.3:a:sun:jdk:1.6.0:update17:::::: cpe:2.3:a:sun:jdk:1.6.0:update19:::::: cpe:2.3:a:sun:jdk:1.6.0:update_22:::::: cpe:2.3:a:sun:jdk:1.6.0:update_23:::::: cpe:2.3:a:sun:jdk:1.6.0:update_25:::::: cpe:2.3:a:sun:jdk:1.6.0:update_24:::::: cpe:2.3:a:sun:jdk:1.6.0:update_26:::::: cpe:2.3:a:sun:jdk:1.6.0:update_27:::::: cpe:2.3:a:sun:jdk:1.6.0:update_20:x64:::::* cpe:2.3:a:sun:jdk:1.6.0:-:::::: cpe:2.3:a:sun:jdk:1.6:::::::* cpe:2.3:a:sun:jdk:1.5.0_03::solaris::::: cpe:2.3:a:sun:jdk:1.5.0_03::windows::::: cpe:2.3:a:sun:jdk:1.5.0_03::linux::::: cpe:2.3:a:sun:jdk:1.5.0:update25:::::: cpe:2.3:a:sun:jdk:1.5.0:update10:::::: cpe:2.3:a:sun:jdk:1.5.0:update5:::::: cpe:2.3:a:sun:jdk:1.5.0:update7:::::: cpe:2.3:a:sun:jdk:1.5.0:update6:::::: cpe:2.3:a:sun:jdk:1.5.0:update3:::::: cpe:2.3:a:sun:jdk:1.5.0:update16:::::: cpe:2.3:a:sun:jdk:1.5.0:update4:::::: cpe:2.3:a:sun:jdk:1.5.0:update17:::::: cpe:2.3:a:sun:jdk:1.5.0:update9:::::: cpe:2.3:a:sun:jdk:1.5.0:update19:::::: cpe:2.3:a:sun:jdk:1.5.0:update15:::::: cpe:2.3:a:sun:jdk:1.5.0:update21:::::: cpe:2.3:a:sun:jdk:1.5.0:update2:::::: cpe:2.3:a:sun:jdk:1.5.0:update12:::::: cpe:2.3:a:sun:jdk:1.5.0:update23:::::: cpe:2.3:a:sun:jdk:1.5.0:update8:::::: cpe:2.3:a:sun:jdk:1.5.0:update18:::::: cpe:2.3:a:sun:jdk:1.5.0:update11:::::: cpe:2.3:a:sun:jdk:1.5.0:update24:::::: cpe:2.3:a:sun:jdk:1.5.0:update22:::::: cpe:2.3:a:sun:jdk:1.5.0:update20:::::: cpe:2.3:a:sun:jdk:1.5.0:update14:::::: cpe:2.3:a:sun:jdk:1.5.0:update13:::::: cpe:2.3:a:sun:jdk:1.5.0:update1:::::: cpe:2.3:a:sun:jdk:1.5.0:update_1:::::: cpe:2.3:a:sun:jdk:1.5.0:update_16:::::: cpe:2.3:a:sun:jdk:1.5.0:update11_b03:::::: cpe:2.3:a:sun:jdk:1.5.0:update_10:::::: cpe:2.3:a:sun:jdk:1.5.0:update_4:::::: cpe:2.3:a:sun:jdk:1.5.0:update_9:::::: cpe:2.3:a:sun:jdk:1.5.0:update_14:::::: cpe:2.3:a:sun:jdk:1.5.0:update_20:::::: cpe:2.3:a:sun:jdk:1.5.0:update_21:::::: cpe:2.3:a:sun:jdk:1.5.0:update_7:::::: cpe:2.3:a:sun:jdk:1.5.0:update_18:::::: cpe:2.3:a:sun:jdk:1.5.0:update_6:::::: cpe:2.3:a:sun:jdk:1.5.0:update7_b03:::::: cpe:2.3:a:sun:jdk:1.5.0:update_12:::::: cpe:2.3:a:sun:jdk:1.5.0:update_2:::::: cpe:2.3:a:sun:jdk:1.5.0:update_13:::::: cpe:2.3:a:sun:jdk:1.5.0:update_3:::::: cpe:2.3:a:sun:jdk:1.5.0:update_15:::::: cpe:2.3:a:sun:jdk:1.5.0:update_17:::::: cpe:2.3:a:sun:jdk:1.5.0:update_19:::::: cpe:2.3:a:sun:jdk:1.5.0:update_5:::::: cpe:2.3:a:sun:jdk:1.5.0:update_22:::::: cpe:2.3:a:sun:jdk:1.5.0:update_8:::::: cpe:2.3:a:sun:jdk:1.5.0:update_11:::::: cpe:2.3:a:sun:jdk:1.5.0:update26:::::: cpe:2.3:a:sun:jdk:1.5.0:update27:::::: cpe:2.3:a:sun:jdk:1.5.0:update35:::::: cpe:2.3:a:sun:jdk:1.5.0:update29:::::: cpe:2.3:a:sun:jdk:1.5.0:update33:::::: cpe:2.3:a:sun:jdk:1.5.0:update31:::::: cpe:2.3:a:sun:jdk:1.5.0:update28:::::: cpe:2.3:a:sun:jdk:1.5.0:-:::::: cpe:2.3:a:sun:jdk:1.4.2_9:::::::* cpe:2.3:a:sun:jdk:1.4.2_8:::::::* cpe:2.3:a:sun:jdk:1.4.2_7:::::::* cpe:2.3:a:sun:jdk:1.4.2_6:::::::* cpe:2.3:a:sun:jdk:1.4.2_5:::::::* cpe:2.3:a:sun:jdk:1.4.2_4:::::::* cpe:2.3:a:sun:jdk:1.4.2_37:::::::* cpe:2.3:a:sun:jdk:1.4.2_36:::::::* cpe:2.3:a:sun:jdk:1.4.2_35:::::::* cpe:2.3:a:sun:jdk:1.4.2_34:::::::* cpe:2.3:a:sun:jdk:1.4.2_33:::::::* cpe:2.3:a:sun:jdk:1.4.2_32:::::::* cpe:2.3:a:sun:jdk:1.4.2_31:::::::* cpe:2.3:a:sun:jdk:1.4.2_30:::::::* cpe:2.3:a:sun:jdk:1.4.2_3:::::::* cpe:2.3:a:sun:jdk:1.4.2_29:::::::* cpe:2.3:a:sun:jdk:1.4.2_28:::::::* cpe:2.3:a:sun:jdk:1.4.2_27:::::::* cpe:2.3:a:sun:jdk:1.4.2_26:::::::* cpe:2.3:a:sun:jdk:1.4.2_25:::::::* cpe:2.3:a:sun:jdk:1.4.2_24:::::::* cpe:2.3:a:sun:jdk:1.4.2_24::solaris::::: cpe:2.3:a:sun:jdk:1.4.2_23:::::::* cpe:2.3:a:sun:jdk:1.4.2_22:::::::* cpe:2.3:a:sun:jdk:1.4.2_21:::::::* cpe:2.3:a:sun:jdk:1.4.2_20:::::::* cpe:2.3:a:sun:jdk:1.4.2_2:::::::* cpe:2.3:a:sun:jdk:1.4.2_19:::::::* cpe:2.3:a:sun:jdk:1.4.2_18:::::::* cpe:2.3:a:sun:jdk:1.4.2_17:::::::* cpe:2.3:a:sun:jdk:1.4.2_16:::::::* cpe:2.3:a:sun:jdk:1.4.2_15:::::::* cpe:2.3:a:sun:jdk:1.4.2_14:::::::* cpe:2.3:a:sun:jdk:1.4.2_13:::::::* cpe:2.3:a:sun:jdk:1.4.2_12:::::::* cpe:2.3:a:sun:jdk:1.4.2_11:::::::* cpe:2.3:a:sun:jdk:1.4.2_10:::::::* cpe:2.3:a:sun:jdk:1.4.2_1:::::::* cpe:2.3:a:sun:jdk:1.4.2_08::windows::::: cpe:2.3:a:sun:jdk:1.4.2_08::solaris::::: cpe:2.3:a:sun:jdk:1.4.2_08::linux::::: cpe:2.3:a:sun:jdk:1.4.2_05::windows::::: cpe:2.3:a:sun:jdk:1.4.2_05::linux::::: cpe:2.3:a:sun:jdk:1.4.2_05::solaris::::: cpe:2.3:a:sun:jdk:1.4.2_04::linux::::: cpe:2.3:a:sun:jdk:1.4.2_04::solaris::::: cpe:2.3:a:sun:jdk:1.4.2_04::windows::::: cpe:2.3:a:sun:jdk:1.4.2_03::windows::::: cpe:2.3:a:sun:jdk:1.4.2_03::linux::::: cpe:2.3:a:sun:jdk:1.4.2_03::solaris::::: cpe:2.3:a:sun:jdk:1.4.2_02::linux::::: cpe:2.3:a:sun:jdk:1.4.2_01::linux::::: cpe:2.3:a:sun:jdk:1.4.2::solaris::::: cpe:2.3:a:sun:jdk:1.4.2::windows::::: cpe:2.3:a:sun:jdk:1.4.2::linux::::: cpe:2.3:a:sun:jdk:1.4.2:-:::::: cpe:2.3:a:sun:jdk:1.4.1_07:::::::* cpe:2.3:a:sun:jdk:1.4.1_06:::::::* cpe:2.3:a:sun:jdk:1.4.1_05:::::::* cpe:2.3:a:sun:jdk:1.4.1_04:::::::* cpe:2.3:a:sun:jdk:1.4.1_03:::::::* cpe:2.3:a:sun:jdk:1.4.1_03::solaris::::: cpe:2.3:a:sun:jdk:1.4.1_03::windows::::: cpe:2.3:a:sun:jdk:1.4.1_03::linux::::: cpe:2.3:a:sun:jdk:1.4.1_02:::::::* cpe:2.3:a:sun:jdk:1.4.1_02::windows::::: cpe:2.3:a:sun:jdk:1.4.1_02::linux::::: cpe:2.3:a:sun:jdk:1.4.1_02::solaris::::: cpe:2.3:a:sun:jdk:1.4.1_01:::::::* cpe:2.3:a:sun:jdk:1.4.1_01::linux::::: cpe:2.3:a:sun:jdk:1.4.1_01::solaris::::: cpe:2.3:a:sun:jdk:1.4.1_01::windows::::: cpe:2.3:a:sun:jdk:1.4.1:::::::* cpe:2.3:a:sun:jdk:1.4.1::windows::::: cpe:2.3:a:sun:jdk:1.4.1::solaris::::: cpe:2.3:a:sun:jdk:1.4.1::linux::::: cpe:2.3:a:sun:jdk:1.4.0_4::solaris::::: cpe:2.3:a:sun:jdk:1.4.0_4::windows::::: cpe:2.3:a:sun:jdk:1.4.0_4::linux::::: cpe:2.3:a:sun:jdk:1.4.0_04:::::::* cpe:2.3:a:sun:jdk:1.4.0_03:::::::* cpe:2.3:a:sun:jdk:1.4.0_03::linux::::: cpe:2.3:a:sun:jdk:1.4.0_03::solaris::::: cpe:2.3:a:sun:jdk:1.4.0_03::windows::::: cpe:2.3:a:sun:jdk:1.4.0_02:::::::* cpe:2.3:a:sun:jdk:1.4.0_02::linux::::: cpe:2.3:a:sun:jdk:1.4.0_02::solaris::::: cpe:2.3:a:sun:jdk:1.4.0_02::windows::::: cpe:2.3:a:sun:jdk:1.4.0_01:::::::* cpe:2.3:a:sun:jdk:1.4.0_01::windows::::: cpe:2.3:a:sun:jdk:1.4.0:-:::::: cpe:2.3:a:sun:jdk:1.4::linux::::: cpe:2.3:a:sun:jdk:1.4::windows::::: cpe:2.3:a:sun:jdk:1.4::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_28:::::::* cpe:2.3:a:sun:jdk:1.3.1_27:::::::* cpe:2.3:a:sun:jdk:1.3.1_26:::::::* cpe:2.3:a:sun:jdk:1.3.1_25:::::::* cpe:2.3:a:sun:jdk:1.3.1_24:::::::* cpe:2.3:a:sun:jdk:1.3.1_23:::::::* cpe:2.3:a:sun:jdk:1.3.1_22:::::::* cpe:2.3:a:sun:jdk:1.3.1_21:::::::* cpe:2.3:a:sun:jdk:1.3.1_20:::::::* cpe:2.3:a:sun:jdk:1.3.1_19:::::::* cpe:2.3:a:sun:jdk:1.3.1_18:::::::* cpe:2.3:a:sun:jdk:1.3.1_17:::::::* cpe:2.3:a:sun:jdk:1.3.1_16:::::::* cpe:2.3:a:sun:jdk:1.3.1_15:::::::* cpe:2.3:a:sun:jdk:1.3.1_15::linux::::: cpe:2.3:a:sun:jdk:1.3.1_15::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_15::windows::::: cpe:2.3:a:sun:jdk:1.3.1_14:::::::* cpe:2.3:a:sun:jdk:1.3.1_14::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_14::windows::::: cpe:2.3:a:sun:jdk:1.3.1_14::linux::::: cpe:2.3:a:sun:jdk:1.3.1_13:::::::* cpe:2.3:a:sun:jdk:1.3.1_13::windows::::: cpe:2.3:a:sun:jdk:1.3.1_13::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_13::linux::::: cpe:2.3:a:sun:jdk:1.3.1_12:::::::* cpe:2.3:a:sun:jdk:1.3.1_12::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_12::windows::::: cpe:2.3:a:sun:jdk:1.3.1_12::linux::::: cpe:2.3:a:sun:jdk:1.3.1_11:::::::* cpe:2.3:a:sun:jdk:1.3.1_11::linux::::: cpe:2.3:a:sun:jdk:1.3.1_11::windows::::: cpe:2.3:a:sun:jdk:1.3.1_11::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_10:::::::* cpe:2.3:a:sun:jdk:1.3.1_10::linux::::: cpe:2.3:a:sun:jdk:1.3.1_10::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_10::windows::::: cpe:2.3:a:sun:jdk:1.3.1_09:::::::* cpe:2.3:a:sun:jdk:1.3.1_09::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_09::linux::::: cpe:2.3:a:sun:jdk:1.3.1_09::windows::::: cpe:2.3:a:sun:jdk:1.3.1_08:::::::* cpe:2.3:a:sun:jdk:1.3.1_08::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_08::windows::::: cpe:2.3:a:sun:jdk:1.3.1_08::linux::::: cpe:2.3:a:sun:jdk:1.3.1_07:::::::* cpe:2.3:a:sun:jdk:1.3.1_07::windows::::: cpe:2.3:a:sun:jdk:1.3.1_07::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_07::linux::::: cpe:2.3:a:sun:jdk:1.3.1_06:::::::* cpe:2.3:a:sun:jdk:1.3.1_06::windows::::: cpe:2.3:a:sun:jdk:1.3.1_06::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_06::linux::::: cpe:2.3:a:sun:jdk:1.3.1_05:::::::* cpe:2.3:a:sun:jdk:1.3.1_05::linux::::: cpe:2.3:a:sun:jdk:1.3.1_05::windows::::: cpe:2.3:a:sun:jdk:1.3.1_05::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_04:::::::* cpe:2.3:a:sun:jdk:1.3.1_04::windows::::: cpe:2.3:a:sun:jdk:1.3.1_03:::::::* cpe:2.3:a:sun:jdk:1.3.1_03::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_03::windows::::: cpe:2.3:a:sun:jdk:1.3.1_03::linux::::: cpe:2.3:a:sun:jdk:1.3.1_02:::::::* cpe:2.3:a:sun:jdk:1.3.1_02::windows::::: cpe:2.3:a:sun:jdk:1.3.1_02::linux::::: cpe:2.3:a:sun:jdk:1.3.1_02::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_01a:::::::* cpe:2.3:a:sun:jdk:1.3.1_01a::windows::::: cpe:2.3:a:sun:jdk:1.3.1_01:::::::* cpe:2.3:a:sun:jdk:1.3.1_01::linux::::: cpe:2.3:a:sun:jdk:1.3.1_01::solaris::::: cpe:2.3:a:sun:jdk:1.3.1:update19:::::: cpe:2.3:a:sun:jdk:1.3.1:update20:::::: cpe:2.3:a:sun:jdk:1.3.1:-:::::: cpe:2.3:a:sun:jdk:1.3.0_05:::::::* cpe:2.3:a:sun:jdk:1.3.0_05::linux::::: cpe:2.3:a:sun:jdk:1.3.0_05::windows::::: cpe:2.3:a:sun:jdk:1.3.0_05::solaris::::: cpe:2.3:a:sun:jdk:1.3.0_04:::::::* cpe:2.3:a:sun:jdk:1.3.0_03:::::::* cpe:2.3:a:sun:jdk:1.3.0_02:::::::* cpe:2.3:a:sun:jdk:1.3.0_02::windows::::: cpe:2.3:a:sun:jdk:1.3.0_02::solaris::::: cpe:2.3:a:sun:jdk:1.3.0_02::linux::::: cpe:2.3:a:sun:jdk:1.3.0_01:::::::* cpe:2.3:a:sun:jdk:1.3.0:::::::* cpe:2.3:a:sun:jdk:1.3_05::solaris::::: cpe:2.3:a:sun:jdk:1.3_02::solaris::::: cpe:2.3:a:sun:jdk:1.3::solaris::::: cpe:2.3:a:sun:jdk:1.2.2_12::windows::::: cpe:2.3:a:sun:jdk:1.2.2_11::linux::::: cpe:2.3:a:sun:jdk:1.2.2_11::windows::::: cpe:2.3:a:sun:jdk:1.2.2_11::solaris::::: cpe:2.3:a:sun:jdk:1.2.2_10::solaris::::: cpe:2.3:a:sun:jdk:1.2.2_10::windows::::: cpe:2.3:a:sun:jdk:1.2.2_10::linux::::: cpe:2.3:a:sun:jdk:1.2.2_07a::solaris::::: cpe:2.3:a:sun:jdk:1.2.2_07::windows::::: cpe:2.3:a:sun:jdk:1.2.2_07::linux::::: cpe:2.3:a:sun:jdk:1.2.2_07::solaris::::: cpe:2.3:a:sun:jdk:1.2.2:update4:::::: cpe:2.3:a:sun:jdk:1.2.2:update5:::::: cpe:2.3:a:sun:jdk:1.2.2::solaris::::: cpe:2.3:a:sun:jdk:1.2.1:update3:::::: cpe:2.3:a:sun:jdk:1.2.1:-:::::: cpe:2.3:a:sun:jdk:1.2.0:::::::* cpe:2.3:a:sun:jdk:1.1.8:update13:::::: cpe:2.3:a:sun:jdk:1.1.8:update14:::::: cpe:2.3:a:sun:jdk:1.1.8:update2:::::: cpe:2.3:a:sun:jdk:1.1.8:update8:::::: cpe:2.3:a:sun:jdk:1.1.8:update10:::::: cpe:2.3:a:sun:jdk:1.1.8:update7:::::: cpe:2.3:a:sun:jdk:1.1.7b:update5:::::: cpe:2.3:a:sun:jdk:1.1.7b:-:::::: cpe:2.3:a:sun:jdk:1.1.6:update7:::::: cpe:2.3:a:sun:jdk:1.1.6:-:::::: cpe:2.3:a:sun:jdk:1.1.0:::::::*	321
Application	Sun Jre cpe:2.3:a:sun:jre:1.6.0:update_4:::::: cpe:2.3:a:sun:jre:1.6.0:update_16:::::: cpe:2.3:a:sun:jre:1.6.0:update_14:::::: cpe:2.3:a:sun:jre:1.6.0:update_10:::::: cpe:2.3:a:sun:jre:1.6.0:update_20:::::: cpe:2.3:a:sun:jre:1.6.0:update_18:::::: cpe:2.3:a:sun:jre:1.6.0:update_11:::::: cpe:2.3:a:sun:jre:1.6.0:update_13:::::: cpe:2.3:a:sun:jre:1.6.0:update_6:::::: cpe:2.3:a:sun:jre:1.6.0:update_1:::::: cpe:2.3:a:sun:jre:1.6.0:update_17:::::: cpe:2.3:a:sun:jre:1.6.0:update_7:::::: cpe:2.3:a:sun:jre:1.6.0:update_12:::::: cpe:2.3:a:sun:jre:1.6.0:update_15:::::: cpe:2.3:a:sun:jre:1.6.0:update_3:::::: cpe:2.3:a:sun:jre:1.6.0:update_2:::::: cpe:2.3:a:sun:jre:1.6.0:update_21:::::: cpe:2.3:a:sun:jre:1.6.0:update_5:::::: cpe:2.3:a:sun:jre:1.6.0:update_19:::::: cpe:2.3:a:sun:jre:1.6.0:update11:::::: cpe:2.3:a:sun:jre:1.6.0:update15:::::: cpe:2.3:a:sun:jre:1.6.0:update16:::::: cpe:2.3:a:sun:jre:1.6.0:update5:::::: cpe:2.3:a:sun:jre:1.6.0:update10:::::: cpe:2.3:a:sun:jre:1.6.0:update9:::::: cpe:2.3:a:sun:jre:1.6.0:update8:::::: cpe:2.3:a:sun:jre:1.6.0:update14:::::: cpe:2.3:a:sun:jre:1.6.0:update7:::::: cpe:2.3:a:sun:jre:1.6.0:update12:::::: cpe:2.3:a:sun:jre:1.6.0:update6:::::: cpe:2.3:a:sun:jre:1.6.0:update13:::::: cpe:2.3:a:sun:jre:1.6.0:update4:::::: cpe:2.3:a:sun:jre:1.6.0:update_8:::::: cpe:2.3:a:sun:jre:1.6.0:update_9:::::: cpe:2.3:a:sun:jre:1.6.0:update17:::::: cpe:2.3:a:sun:jre:1.6.0:update19:::::: cpe:2.3:a:sun:jre:1.6.0:update18:::::: cpe:2.3:a:sun:jre:1.6.0:update_22:::::: cpe:2.3:a:sun:jre:1.6.0:update_23:::::: cpe:2.3:a:sun:jre:1.6.0:update_25:::::: cpe:2.3:a:sun:jre:1.6.0:update_24:::::: cpe:2.3:a:sun:jre:1.6.0:update_26:::::: cpe:2.3:a:sun:jre:1.6.0:update_27:::::: cpe:2.3:a:sun:jre:1.6.0:-:::::: cpe:2.3:a:sun:jre:1.5.0_11-b03:::::::* cpe:2.3:a:sun:jre:1.5.0:update16:::::: cpe:2.3:a:sun:jre:1.5.0:update17:::::: cpe:2.3:a:sun:jre:1.5.0:update15:::::: cpe:2.3:a:sun:jre:1.5.0:update22:::::: cpe:2.3:a:sun:jre:1.5.0:update12:::::: cpe:2.3:a:sun:jre:1.5.0:update10:::::: cpe:2.3:a:sun:jre:1.5.0:update6:::::: cpe:2.3:a:sun:jre:1.5.0:update13:::::: cpe:2.3:a:sun:jre:1.5.0:update14:::::: cpe:2.3:a:sun:jre:1.5.0:update24:::::: cpe:2.3:a:sun:jre:1.5.0:update11:::::: cpe:2.3:a:sun:jre:1.5.0:update18:::::: cpe:2.3:a:sun:jre:1.5.0:update8:::::: cpe:2.3:a:sun:jre:1.5.0:update1:::::: cpe:2.3:a:sun:jre:1.5.0:update9:::::: cpe:2.3:a:sun:jre:1.5.0:update21:::::: cpe:2.3:a:sun:jre:1.5.0:update20:::::: cpe:2.3:a:sun:jre:1.5.0:update3:::::: cpe:2.3:a:sun:jre:1.5.0:update25:::::: cpe:2.3:a:sun:jre:1.5.0:update4:::::: cpe:2.3:a:sun:jre:1.5.0:update5:::::: cpe:2.3:a:sun:jre:1.5.0:update2:::::: cpe:2.3:a:sun:jre:1.5.0:update7:::::: cpe:2.3:a:sun:jre:1.5.0:update23:::::: cpe:2.3:a:sun:jre:1.5.0:update19:::::: cpe:2.3:a:sun:jre:1.5.0:update_6:::::: cpe:2.3:a:sun:jre:1.5.0:update_7:::::: cpe:2.3:a:sun:jre:1.5.0:update_15:::::: cpe:2.3:a:sun:jre:1.5.0:update_1:::::: cpe:2.3:a:sun:jre:1.5.0:update_3:::::: cpe:2.3:a:sun:jre:1.5.0:update_8:::::: cpe:2.3:a:sun:jre:1.5.0:update_17:::::: cpe:2.3:a:sun:jre:1.5.0:update_2:::::: cpe:2.3:a:sun:jre:1.5.0:update_18:::::: cpe:2.3:a:sun:jre:1.5.0:update_12:::::: cpe:2.3:a:sun:jre:1.5.0:update_9:::::: cpe:2.3:a:sun:jre:1.5.0:update_21:::::: cpe:2.3:a:sun:jre:1.5.0:update_19:::::: cpe:2.3:a:sun:jre:1.5.0:update_14:::::: cpe:2.3:a:sun:jre:1.5.0:update_16:::::: cpe:2.3:a:sun:jre:1.5.0:update_4:::::: cpe:2.3:a:sun:jre:1.5.0:update_13:::::: cpe:2.3:a:sun:jre:1.5.0:update_20:::::: cpe:2.3:a:sun:jre:1.5.0:update_5:::::: cpe:2.3:a:sun:jre:1.5.0:update_11:::::: cpe:2.3:a:sun:jre:1.5.0:update27:::::: cpe:2.3:a:sun:jre:1.5.0:update26:::::: cpe:2.3:a:sun:jre:1.5.0:update35:::::: cpe:2.3:a:sun:jre:1.5.0:update28:::::: cpe:2.3:a:sun:jre:1.5.0:update31:::::: cpe:2.3:a:sun:jre:1.5.0:update33:::::: cpe:2.3:a:sun:jre:1.5.0:update29:::::: cpe:2.3:a:sun:jre:1.5.0:-:::::: cpe:2.3:a:sun:jre:1.4.2_9:::::::* cpe:2.3:a:sun:jre:1.4.2_8:::::::* cpe:2.3:a:sun:jre:1.4.2_7:::::::* cpe:2.3:a:sun:jre:1.4.2_6:::::::* cpe:2.3:a:sun:jre:1.4.2_5:::::::* cpe:2.3:a:sun:jre:1.4.2_4:::::::* cpe:2.3:a:sun:jre:1.4.2_37:::::::* cpe:2.3:a:sun:jre:1.4.2_36:::::::* cpe:2.3:a:sun:jre:1.4.2_35:::::::* cpe:2.3:a:sun:jre:1.4.2_34:::::::* cpe:2.3:a:sun:jre:1.4.2_33:::::::* cpe:2.3:a:sun:jre:1.4.2_32:::::::* cpe:2.3:a:sun:jre:1.4.2_31:::::::* cpe:2.3:a:sun:jre:1.4.2_30:::::::* cpe:2.3:a:sun:jre:1.4.2_3:::::::* cpe:2.3:a:sun:jre:1.4.2_29:::::::* cpe:2.3:a:sun:jre:1.4.2_28:::::::* cpe:2.3:a:sun:jre:1.4.2_27:::::::* cpe:2.3:a:sun:jre:1.4.2_26:::::::* cpe:2.3:a:sun:jre:1.4.2_25:::::::* cpe:2.3:a:sun:jre:1.4.2_24:::::::* cpe:2.3:a:sun:jre:1.4.2_23:::::::* cpe:2.3:a:sun:jre:1.4.2_22:::::::* cpe:2.3:a:sun:jre:1.4.2_21:::::::* cpe:2.3:a:sun:jre:1.4.2_20:::::::* cpe:2.3:a:sun:jre:1.4.2_2:::::::* cpe:2.3:a:sun:jre:1.4.2_19:::::::* cpe:2.3:a:sun:jre:1.4.2_18:::::::* cpe:2.3:a:sun:jre:1.4.2_17:::::::* cpe:2.3:a:sun:jre:1.4.2_16:::::::* cpe:2.3:a:sun:jre:1.4.2_15:::::::* cpe:2.3:a:sun:jre:1.4.2_14:::::::* cpe:2.3:a:sun:jre:1.4.2_13:::::::* cpe:2.3:a:sun:jre:1.4.2_12:::::::* cpe:2.3:a:sun:jre:1.4.2_11:::::::* cpe:2.3:a:sun:jre:1.4.2_10:::::::* cpe:2.3:a:sun:jre:1.4.2_1:::::::* cpe:2.3:a:sun:jre:1.4.2_09:::::::* cpe:2.3:a:sun:jre:1.4.2_08:::::::* cpe:2.3:a:sun:jre:1.4.2_07:::::::* cpe:2.3:a:sun:jre:1.4.2_06:::::::* cpe:2.3:a:sun:jre:1.4.2_05:::::::* cpe:2.3:a:sun:jre:1.4.2_04:::::::* cpe:2.3:a:sun:jre:1.4.2_03:::::::* cpe:2.3:a:sun:jre:1.4.2_02:::::::* cpe:2.3:a:sun:jre:1.4.2_01:::::::* cpe:2.3:a:sun:jre:1.4.2:update1:solaris:::::* cpe:2.3:a:sun:jre:1.4.2:update4:linux:::::* cpe:2.3:a:sun:jre:1.4.2::solaris::::: cpe:2.3:a:sun:jre:1.4.2:update2:linux:::::* cpe:2.3:a:sun:jre:1.4.2:update1:linux:::::* cpe:2.3:a:sun:jre:1.4.2:update1:windows:::::* cpe:2.3:a:sun:jre:1.4.2:update4:solaris:::::* cpe:2.3:a:sun:jre:1.4.2:update3:windows:::::* cpe:2.3:a:sun:jre:1.4.2:update2:solaris:::::* cpe:2.3:a:sun:jre:1.4.2:update5:windows:::::* cpe:2.3:a:sun:jre:1.4.2::linux::::: cpe:2.3:a:sun:jre:1.4.2:update5:linux:::::* cpe:2.3:a:sun:jre:1.4.2:update2:windows:::::* cpe:2.3:a:sun:jre:1.4.2:update3:linux:::::* cpe:2.3:a:sun:jre:1.4.2::windows::::: cpe:2.3:a:sun:jre:1.4.2:update3:solaris:::::* cpe:2.3:a:sun:jre:1.4.2:update4:windows:::::* cpe:2.3:a:sun:jre:1.4.2:update5:solaris:::::* cpe:2.3:a:sun:jre:1.4.2:update20:::::: cpe:2.3:a:sun:jre:1.4.2:update17:::::: cpe:2.3:a:sun:jre:1.4.2:update19:::::: cpe:2.3:a:sun:jre:1.4.2:update18:::::: cpe:2.3:a:sun:jre:1.4.2:update16:::::: cpe:2.3:a:sun:jre:1.4.2:update28:::::: cpe:2.3:a:sun:jre:1.4.2:-:::::: cpe:2.3:a:sun:jre:1.4.1_07::windows::::: cpe:2.3:a:sun:jre:1.4.1_07::solaris::::: cpe:2.3:a:sun:jre:1.4.1_07::linux::::: cpe:2.3:a:sun:jre:1.4.1_07:::::::* cpe:2.3:a:sun:jre:1.4.1_06::solaris::::: cpe:2.3:a:sun:jre:1.4.1_06:::::::* cpe:2.3:a:sun:jre:1.4.1_06::linux::::: cpe:2.3:a:sun:jre:1.4.1_06::windows::::: cpe:2.3:a:sun:jre:1.4.1_05::linux::::: cpe:2.3:a:sun:jre:1.4.1_05::windows::::: cpe:2.3:a:sun:jre:1.4.1_05:::::::* cpe:2.3:a:sun:jre:1.4.1_05::solaris::::: cpe:2.3:a:sun:jre:1.4.1_04:::::::* cpe:2.3:a:sun:jre:1.4.1_04::windows::::: cpe:2.3:a:sun:jre:1.4.1_04::linux::::: cpe:2.3:a:sun:jre:1.4.1_04::solaris::::: cpe:2.3:a:sun:jre:1.4.1_03::solaris::::: cpe:2.3:a:sun:jre:1.4.1_03:::::::* cpe:2.3:a:sun:jre:1.4.1_03::windows::::: cpe:2.3:a:sun:jre:1.4.1_03::linux::::: cpe:2.3:a:sun:jre:1.4.1_02::solaris::::: cpe:2.3:a:sun:jre:1.4.1_02::linux::::: cpe:2.3:a:sun:jre:1.4.1_02::windows::::: cpe:2.3:a:sun:jre:1.4.1_02:::::::* cpe:2.3:a:sun:jre:1.4.1_01::solaris::::: cpe:2.3:a:sun:jre:1.4.1_01::windows::::: cpe:2.3:a:sun:jre:1.4.1_01::linux::::: cpe:2.3:a:sun:jre:1.4.1_01:::::::* cpe:2.3:a:sun:jre:1.4.1:update3:::::: cpe:2.3:a:sun:jre:1.4.1::linux::::: cpe:2.3:a:sun:jre:1.4.1:update3:linux:::::* cpe:2.3:a:sun:jre:1.4.1:update3:solaris:::::* cpe:2.3:a:sun:jre:1.4.1::windows::::: cpe:2.3:a:sun:jre:1.4.1::solaris::::: cpe:2.3:a:sun:jre:1.4.1:update3:windows:::::* cpe:2.3:a:sun:jre:1.4.1:update2:::::: cpe:2.3:a:sun:jre:1.4.1:update4:::::: cpe:2.3:a:sun:jre:1.4.1:update1:::::: cpe:2.3:a:sun:jre:1.4.1:update7:::::: cpe:2.3:a:sun:jre:1.4.1:update6:::::: cpe:2.3:a:sun:jre:1.4.1:update5:::::: cpe:2.3:a:sun:jre:1.4.1:-:::::: cpe:2.3:a:sun:jre:1.4.0_04::solaris::::: cpe:2.3:a:sun:jre:1.4.0_04::windows::::: cpe:2.3:a:sun:jre:1.4.0_04::linux::::: cpe:2.3:a:sun:jre:1.4.0_04:::::::* cpe:2.3:a:sun:jre:1.4.0_03::solaris::::: cpe:2.3:a:sun:jre:1.4.0_03::linux::::: cpe:2.3:a:sun:jre:1.4.0_03::windows::::: cpe:2.3:a:sun:jre:1.4.0_03:::::::* cpe:2.3:a:sun:jre:1.4.0_02::linux::::: cpe:2.3:a:sun:jre:1.4.0_02::windows::::: cpe:2.3:a:sun:jre:1.4.0_02::solaris::::: cpe:2.3:a:sun:jre:1.4.0_02:::::::* cpe:2.3:a:sun:jre:1.4.0_01::solaris::::: cpe:2.3:a:sun:jre:1.4.0_01::windows::::: cpe:2.3:a:sun:jre:1.4.0_01::linux::::: cpe:2.3:a:sun:jre:1.4.0_01:::::::* cpe:2.3:a:sun:jre:1.4.0:::::::* cpe:2.3:a:sun:jre:1.4:::::::* cpe:2.3:a:sun:jre:1.4::linux::::: cpe:2.3:a:sun:jre:1.4::solaris::::: cpe:2.3:a:sun:jre:1.4::windows::::: cpe:2.3:a:sun:jre:1.3.1_9:::::::* cpe:2.3:a:sun:jre:1.3.1_8:::::::* cpe:2.3:a:sun:jre:1.3.1_7:::::::* cpe:2.3:a:sun:jre:1.3.1_6:::::::* cpe:2.3:a:sun:jre:1.3.1_5:::::::* cpe:2.3:a:sun:jre:1.3.1_4:::::::* cpe:2.3:a:sun:jre:1.3.1_3:::::::* cpe:2.3:a:sun:jre:1.3.1_28:::::::* cpe:2.3:a:sun:jre:1.3.1_27:::::::* cpe:2.3:a:sun:jre:1.3.1_26:::::::* cpe:2.3:a:sun:jre:1.3.1_25:::::::* cpe:2.3:a:sun:jre:1.3.1_24:::::::* cpe:2.3:a:sun:jre:1.3.1_23:::::::* cpe:2.3:a:sun:jre:1.3.1_22:::::::* cpe:2.3:a:sun:jre:1.3.1_21:::::::* cpe:2.3:a:sun:jre:1.3.1_20:::::::* cpe:2.3:a:sun:jre:1.3.1_2:::::::* cpe:2.3:a:sun:jre:1.3.1_19:::::::* cpe:2.3:a:sun:jre:1.3.1_18:::::::* cpe:2.3:a:sun:jre:1.3.1_17:::::::* cpe:2.3:a:sun:jre:1.3.1_16:::::::* cpe:2.3:a:sun:jre:1.3.1_15:::::::* cpe:2.3:a:sun:jre:1.3.1_14:::::::* cpe:2.3:a:sun:jre:1.3.1_13:::::::* cpe:2.3:a:sun:jre:1.3.1_12:::::::* cpe:2.3:a:sun:jre:1.3.1_11:::::::* cpe:2.3:a:sun:jre:1.3.1_10:::::::* cpe:2.3:a:sun:jre:1.3.1_1:::::::* cpe:2.3:a:sun:jre:1.3.1_09:::::::* cpe:2.3:a:sun:jre:1.3.1_09::linux::::: cpe:2.3:a:sun:jre:1.3.1_09::solaris::::: cpe:2.3:a:sun:jre:1.3.1_09::windows::::: cpe:2.3:a:sun:jre:1.3.1_08:::::::* cpe:2.3:a:sun:jre:1.3.1_07:::::::* cpe:2.3:a:sun:jre:1.3.1_07::solaris::::: cpe:2.3:a:sun:jre:1.3.1_07::linux::::: cpe:2.3:a:sun:jre:1.3.1_07::windows::::: cpe:2.3:a:sun:jre:1.3.1_06:::::::* cpe:2.3:a:sun:jre:1.3.1_06::solaris::::: cpe:2.3:a:sun:jre:1.3.1_06::linux::::: cpe:2.3:a:sun:jre:1.3.1_06::windows::::: cpe:2.3:a:sun:jre:1.3.1_05:::::::* cpe:2.3:a:sun:jre:1.3.1_05::linux::::: cpe:2.3:a:sun:jre:1.3.1_05::windows::::: cpe:2.3:a:sun:jre:1.3.1_05::solaris::::: cpe:2.3:a:sun:jre:1.3.1_04:::::::* cpe:2.3:a:sun:jre:1.3.1_03:::::::* cpe:2.3:a:sun:jre:1.3.1_03::windows::::: cpe:2.3:a:sun:jre:1.3.1_03::solaris::::: cpe:2.3:a:sun:jre:1.3.1_03::linux::::: cpe:2.3:a:sun:jre:1.3.1_02::solaris::::: cpe:2.3:a:sun:jre:1.3.1_02::windows::::: cpe:2.3:a:sun:jre:1.3.1_02::linux::::: cpe:2.3:a:sun:jre:1.3.1_02:::::::* cpe:2.3:a:sun:jre:1.3.1_01a:::::::* cpe:2.3:a:sun:jre:1.3.1_01:::::::* cpe:2.3:a:sun:jre:1.3.1:update2:::::: cpe:2.3:a:sun:jre:1.3.1:update1:::::: cpe:2.3:a:sun:jre:1.3.1:update16:::::: cpe:2.3:a:sun:jre:1.3.1:update18:::::: cpe:2.3:a:sun:jre:1.3.1:update20:::::: cpe:2.3:a:sun:jre:1.3.1:update19:::::: cpe:2.3:a:sun:jre:1.3.1:update1a:::::: cpe:2.3:a:sun:jre:1.3.1:update8:::::: cpe:2.3:a:sun:jre:1.3.1:update15:::::: cpe:2.3:a:sun:jre:1.3.1:update4:::::: cpe:2.3:a:sun:jre:1.3.1:update4:windows:::::* cpe:2.3:a:sun:jre:1.3.1::linux::::: cpe:2.3:a:sun:jre:1.3.1:update8:solaris:::::* cpe:2.3:a:sun:jre:1.3.1:update1a:windows:::::* cpe:2.3:a:sun:jre:1.3.1:update1:linux:::::* cpe:2.3:a:sun:jre:1.3.1:update4:solaris:::::* cpe:2.3:a:sun:jre:1.3.1:update8:windows:::::* cpe:2.3:a:sun:jre:1.3.1:update1:windows:::::* cpe:2.3:a:sun:jre:1.3.1:update1:solaris:::::* cpe:2.3:a:sun:jre:1.3.1:update8:linux:::::* cpe:2.3:a:sun:jre:1.3.1:update12:::::: cpe:2.3:a:sun:jre:1.3.1:update17:::::: cpe:2.3:a:sun:jre:1.3.1:-:::::: cpe:2.3:a:sun:jre:1.3.0:update5:::::: cpe:2.3:a:sun:jre:1.3.0:update4:::::: cpe:2.3:a:sun:jre:1.3.0:update1:::::: cpe:2.3:a:sun:jre:1.3.0:update3:::::: cpe:2.3:a:sun:jre:1.3.0:update2:::::: cpe:2.3:a:sun:jre:1.3.0:update4:windows:::::* cpe:2.3:a:sun:jre:1.3.0:update5:linux:::::* cpe:2.3:a:sun:jre:1.3.0:update5:solaris:::::* cpe:2.3:a:sun:jre:1.3.0:update3:linux:::::* cpe:2.3:a:sun:jre:1.3.0::windows::::: cpe:2.3:a:sun:jre:1.3.0:update4:linux:::::* cpe:2.3:a:sun:jre:1.3.0:update2:solaris:::::* cpe:2.3:a:sun:jre:1.3.0:update1:linux:::::* cpe:2.3:a:sun:jre:1.3.0::linux::::: cpe:2.3:a:sun:jre:1.3.0:update5:windows:::::* cpe:2.3:a:sun:jre:1.3.0:update2:linux:::::* cpe:2.3:a:sun:jre:1.3.0::solaris::::: cpe:2.3:a:sun:jre:1.3.0:update2:windows:::::* cpe:2.3:a:sun:jre:1.3.0:-:::::: cpe:2.3:a:sun:jre:1.2.2_07::solaris::::: cpe:2.3:a:sun:jre:1.2.2_012::solaris::::: cpe:2.3:a:sun:jre:1.2.2_011::solaris::::: cpe:2.3:a:sun:jre:1.2.2_011::linux::::: cpe:2.3:a:sun:jre:1.2.2_011::windows::::: cpe:2.3:a:sun:jre:1.2.2_007::linux::::: cpe:2.3:a:sun:jre:1.2.2_007::solaris::::: cpe:2.3:a:sun:jre:1.2.2_007::windows::::: cpe:2.3:a:sun:jre:1.2.2_006::linux::::: cpe:2.3:a:sun:jre:1.2.2_005::linux::::: cpe:2.3:a:sun:jre:1.2.2_004::linux::::: cpe:2.3:a:sun:jre:1.2.2_003::linux::::: cpe:2.3:a:sun:jre:1.2.2_003::linux_production::::: cpe:2.3:a:sun:jre:1.2.2::solaris::::: cpe:2.3:a:sun:jre:1.2.2:update10:linux:::::* cpe:2.3:a:sun:jre:1.2.2:update10:solaris:::::* cpe:2.3:a:sun:jre:1.2.2::windows::::: cpe:2.3:a:sun:jre:1.2.2:update10:windows:::::* cpe:2.3:a:sun:jre:1.2.2::linux_production::::: cpe:2.3:a:sun:jre:1.2.2:update10:::::: cpe:2.3:a:sun:jre:1.2:::::::* cpe:2.3:a:sun:jre:1.1.8:update13:::::: cpe:2.3:a:sun:jre:1.1.8:update7:::::: cpe:2.3:a:sun:jre:1.1.8:update8:::::: cpe:2.3:a:sun:jre:1.1.8:update14:::::: cpe:2.3:a:sun:jre:1.1:::::::*	356
Application	Sun Sdk cpe:2.3:a:sun:sdk:1.4.2_9:::::::* cpe:2.3:a:sun:sdk:1.4.2_8:::::::* cpe:2.3:a:sun:sdk:1.4.2_7:::::::* cpe:2.3:a:sun:sdk:1.4.2_6:::::::* cpe:2.3:a:sun:sdk:1.4.2_5:::::::* cpe:2.3:a:sun:sdk:1.4.2_4:::::::* cpe:2.3:a:sun:sdk:1.4.2_3:::::::* cpe:2.3:a:sun:sdk:1.4.2_27:::::::* cpe:2.3:a:sun:sdk:1.4.2_26:::::::* cpe:2.3:a:sun:sdk:1.4.2_25:::::::* cpe:2.3:a:sun:sdk:1.4.2_24:::::::* cpe:2.3:a:sun:sdk:1.4.2_23:::::::* cpe:2.3:a:sun:sdk:1.4.2_22:::::::* cpe:2.3:a:sun:sdk:1.4.2_21:::::::* cpe:2.3:a:sun:sdk:1.4.2_20:::::::* cpe:2.3:a:sun:sdk:1.4.2_2:::::::* cpe:2.3:a:sun:sdk:1.4.2_19:::::::* cpe:2.3:a:sun:sdk:1.4.2_18:::::::* cpe:2.3:a:sun:sdk:1.4.2_17:::::::* cpe:2.3:a:sun:sdk:1.4.2_16:::::::* cpe:2.3:a:sun:sdk:1.4.2_15:::::::* cpe:2.3:a:sun:sdk:1.4.2_14:::::::* cpe:2.3:a:sun:sdk:1.4.2_13:::::::* cpe:2.3:a:sun:sdk:1.4.2_12:::::::* cpe:2.3:a:sun:sdk:1.4.2_11:::::::* cpe:2.3:a:sun:sdk:1.4.2_10:::::::* cpe:2.3:a:sun:sdk:1.4.2_1:::::::* cpe:2.3:a:sun:sdk:1.4.2_09:::::::* cpe:2.3:a:sun:sdk:1.4.2_08:::::::* cpe:2.3:a:sun:sdk:1.4.2_07:::::::* cpe:2.3:a:sun:sdk:1.4.2_06:::::::* cpe:2.3:a:sun:sdk:1.4.2_05:::::::* cpe:2.3:a:sun:sdk:1.4.2_04:::::::* cpe:2.3:a:sun:sdk:1.4.2_03:::::::* cpe:2.3:a:sun:sdk:1.4.2_02:::::::* cpe:2.3:a:sun:sdk:1.4.2_01:::::::* cpe:2.3:a:sun:sdk:1.4.2:::::::* cpe:2.3:a:sun:sdk:1.4.1_07:::::::* cpe:2.3:a:sun:sdk:1.4.1_06:::::::* cpe:2.3:a:sun:sdk:1.4.1_05:::::::* cpe:2.3:a:sun:sdk:1.4.1_04:::::::* cpe:2.3:a:sun:sdk:1.4.1_03:::::::* cpe:2.3:a:sun:sdk:1.4.1_02:::::::* cpe:2.3:a:sun:sdk:1.4.1_01:::::::* cpe:2.3:a:sun:sdk:1.4.1:::::::* cpe:2.3:a:sun:sdk:1.4.0_04:::::::* cpe:2.3:a:sun:sdk:1.4.0_03:::::::* cpe:2.3:a:sun:sdk:1.4.0_02:::::::* cpe:2.3:a:sun:sdk:1.4.0_01:::::::* cpe:2.3:a:sun:sdk:1.4.0:::::::* cpe:2.3:a:sun:sdk:1.4:::::::* cpe:2.3:a:sun:sdk:1.3.1_9:::::::* cpe:2.3:a:sun:sdk:1.3.1_8:::::::* cpe:2.3:a:sun:sdk:1.3.1_7:::::::* cpe:2.3:a:sun:sdk:1.3.1_6:::::::* cpe:2.3:a:sun:sdk:1.3.1_5:::::::* cpe:2.3:a:sun:sdk:1.3.1_4:::::::* cpe:2.3:a:sun:sdk:1.3.1_3:::::::* cpe:2.3:a:sun:sdk:1.3.1_28:::::::* cpe:2.3:a:sun:sdk:1.3.1_27:::::::* cpe:2.3:a:sun:sdk:1.3.1_26:::::::* cpe:2.3:a:sun:sdk:1.3.1_25:::::::* cpe:2.3:a:sun:sdk:1.3.1_24:::::::* cpe:2.3:a:sun:sdk:1.3.1_23:::::::* cpe:2.3:a:sun:sdk:1.3.1_22:::::::* cpe:2.3:a:sun:sdk:1.3.1_21:::::::* cpe:2.3:a:sun:sdk:1.3.1_20:::::::* cpe:2.3:a:sun:sdk:1.3.1_2:::::::* cpe:2.3:a:sun:sdk:1.3.1_19:::::::* cpe:2.3:a:sun:sdk:1.3.1_18:::::::* cpe:2.3:a:sun:sdk:1.3.1_17:::::::* cpe:2.3:a:sun:sdk:1.3.1_16:::::::* cpe:2.3:a:sun:sdk:1.3.1_15:::::::* cpe:2.3:a:sun:sdk:1.3.1_14:::::::* cpe:2.3:a:sun:sdk:1.3.1_13:::::::* cpe:2.3:a:sun:sdk:1.3.1_12:::::::* cpe:2.3:a:sun:sdk:1.3.1_11:::::::* cpe:2.3:a:sun:sdk:1.3.1_10:::::::* cpe:2.3:a:sun:sdk:1.3.1_1:::::::* cpe:2.3:a:sun:sdk:1.3.1_09:::::::* cpe:2.3:a:sun:sdk:1.3.1_08:::::::* cpe:2.3:a:sun:sdk:1.3.1_07:::::::* cpe:2.3:a:sun:sdk:1.3.1_06:::::::* cpe:2.3:a:sun:sdk:1.3.1_05:::::::* cpe:2.3:a:sun:sdk:1.3.1_04:::::::* cpe:2.3:a:sun:sdk:1.3.1_03:::::::* cpe:2.3:a:sun:sdk:1.3.1_02:::::::* cpe:2.3:a:sun:sdk:1.3.1_01a:::::::* cpe:2.3:a:sun:sdk:1.3.1_01:::::::* cpe:2.3:a:sun:sdk:1.3.1:::::::* cpe:2.3:a:sun:sdk:1.3.0_05:::::::* cpe:2.3:a:sun:sdk:1.3.0_04:::::::* cpe:2.3:a:sun:sdk:1.3.0_03:::::::* cpe:2.3:a:sun:sdk:1.3.0_02:::::::* cpe:2.3:a:sun:sdk:1.3.0_01:::::::* cpe:2.3:a:sun:sdk:1.3.0:::::::* cpe:2.3:a:sun:sdk:1.3.0::standard::::: cpe:2.3:a:sun:sdk:1.3_05:::::::* cpe:2.3:a:sun:sdk:1.3_02:::::::* cpe:2.3:a:sun:sdk:1.2.2_10:::::::* cpe:2.3:a:sun:sdk:1.2.2_010:::::::* cpe:2.3:a:sun:sdk:1.1.8_007:::::::* cpe:2.3:a:sun:sdk:1.1.3:::::::*	103

OpenVAS Exploits

Date	Description
2012-03-16	Name : VMSA-2011-0003.2 Third party component updates for VMware vCenter Server, vCe... File : nvt/gb_VMSA-2011-0003.nasl
2012-03-15	Name : VMSA-2011-0013.2 VMware third party component updates for VMware vCenter Serv... File : nvt/gb_VMSA-2011-0013.nasl
2012-02-12	Name : Gentoo Security Advisory GLSA 201111-02 (sun-jre-bin sun-jdk emul-linux-x86-j... File : nvt/glsa_201111_02.nasl
2011-08-09	Name : CentOS Update for java CESA-2010:0768 centos5 i386 File : nvt/gb_CESA-2010_0768_java_centos5_i386.nasl
2011-01-04	Name : HP-UX Update for Java HPSBUX02608 File : nvt/gb_hp_ux_HPSBUX02608.nasl
2010-12-02	Name : Fedora Update for java-1.6.0-openjdk FEDORA-2010-16312 File : nvt/gb_fedora_2010_16312_java-1.6.0-openjdk_fc14.nasl
2010-11-04	Name : Ubuntu Update for openjdk-6, openjdk-6b18 vulnerabilities USN-1010-1 File : nvt/gb_ubuntu_USN_1010_1.nasl
2010-10-28	Name : Oracle Java SE Multiple Vulnerabilities (Windows) File : nvt/gb_sun_java_se_mult_vuln_oct10_win.nasl
2010-10-22	Name : Fedora Update for java-1.6.0-openjdk FEDORA-2010-16240 File : nvt/gb_fedora_2010_16240_java-1.6.0-openjdk_fc12.nasl
2010-10-22	Name : Fedora Update for java-1.6.0-openjdk FEDORA-2010-16294 File : nvt/gb_fedora_2010_16294_java-1.6.0-openjdk_fc13.nasl
2010-10-19	Name : RedHat Update for java-1.6.0-openjdk RHSA-2010:0768-01 File : nvt/gb_RHSA-2010_0768-01_java-1.6.0-openjdk.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
69033	Oracle Java SE / Java for Business Networking Component HttpURLConnection all... Oracle Java SE and Java for Business contain a flaw related to the 'Networking' component. The 'HttpURLConnection' class fails to properly check if the calling code had the 'allowHttpTrace' permission, allowing the creation of HTTP TRACE requests by untrusted code.

Information Assurance Vulnerability Management (IAVM)

Date	Description
2011-12-15	IAVM : 2011-A-0173 - Multiple Vulnerabilities in VMware ESX 4.0 Severity : Category I - VMSKEY : V0030824
2011-12-01	IAVM : 2011-A-0160 - Multiple Vulnerabilities in VMware vCenter Server 4.0 and vCenter Update Mana... Severity : Category I - VMSKEY : V0030769
2011-05-12	IAVM : 2011-A-0066 - Multiple Vulnerabilities in VMware Products Severity : Category I - VMSKEY : V0027158

Nessus® Vulnerability Scanner

Date	Description
2016-03-04	Name : The remote VMware ESX / ESXi host is missing a security-related patch. File : vmware_VMSA-2011-0013_remote.nasl - Type : ACT_GATHER_INFO
2016-03-04	Name : The remote VMware ESX / ESXi host is missing a security-related patch. File : vmware_VMSA-2011-0003_remote.nasl - Type : ACT_GATHER_INFO
2014-06-30	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201406-32.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_java-1_6_0-openjdk-101103.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_java-1_6_0-sun-101019.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0768.nasl - Type : ACT_GATHER_INFO
2013-02-22	Name : The remote Unix host contains a programming platform that is affected by mult... File : oracle_java_cpu_oct_2010_unix.nasl - Type : ACT_GATHER_INFO
2013-01-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-0880.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20101110_java_1_6_0_openjdk_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20101014_java__jdk_1_6_0__on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20101013_java_1_6_0_openjdk_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2011-12-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_4_2-ibm-7440.nasl - Type : ACT_GATHER_INFO
2011-11-07	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201111-02.nasl - Type : ACT_GATHER_INFO
2011-10-28	Name : The remote VMware ESXi / ESX host is missing one or more security-related pat... File : vmware_VMSA-2011-0013.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_2_java-1_6_0-openjdk-101103.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_1_java-1_6_0-openjdk-101103.nasl - Type : ACT_GATHER_INFO
2011-03-17	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-0357.nasl - Type : ACT_GATHER_INFO
2011-03-11	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12682.nasl - Type : ACT_GATHER_INFO
2011-03-11	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_4_2-ibm-7348.nasl - Type : ACT_GATHER_INFO
2011-03-11	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_4_2-ibm-110223.nasl - Type : ACT_GATHER_INFO
2011-02-14	Name : The remote VMware ESXi / ESX host is missing one or more security-related pat... File : vmware_VMSA-2011-0003.nasl - Type : ACT_GATHER_INFO
2011-01-27	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_6_0-sun-7204.nasl - Type : ACT_GATHER_INFO
2011-01-25	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_6_0-ibm-101220.nasl - Type : ACT_GATHER_INFO
2011-01-24	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12669.nasl - Type : ACT_GATHER_INFO
2011-01-18	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-0152.nasl - Type : ACT_GATHER_INFO
2010-12-16	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0987.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0935.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_6_0-sun-101019.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_5_0-ibm-7205.nasl - Type : ACT_GATHER_INFO
2010-12-01	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12659.nasl - Type : ACT_GATHER_INFO
2010-11-18	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0873.nasl - Type : ACT_GATHER_INFO
2010-11-18	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0865.nasl - Type : ACT_GATHER_INFO
2010-10-29	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1010-1.nasl - Type : ACT_GATHER_INFO
2010-10-28	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0807.nasl - Type : ACT_GATHER_INFO
2010-10-22	Name : The remote openSUSE host is missing a security update. File : suse_11_2_java-1_6_0-sun-101019.nasl - Type : ACT_GATHER_INFO
2010-10-22	Name : The remote openSUSE host is missing a security update. File : suse_11_1_java-1_6_0-sun-101019.nasl - Type : ACT_GATHER_INFO
2010-10-22	Name : The remote Fedora host is missing a security update. File : fedora_2010-16240.nasl - Type : ACT_GATHER_INFO
2010-10-20	Name : The remote Fedora host is missing a security update. File : fedora_2010-16294.nasl - Type : ACT_GATHER_INFO
2010-10-18	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0768.nasl - Type : ACT_GATHER_INFO
2010-10-18	Name : The remote Fedora host is missing a security update. File : fedora_2010-16312.nasl - Type : ACT_GATHER_INFO
2010-10-15	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0770.nasl - Type : ACT_GATHER_INFO
2010-10-15	Name : The remote Windows host contains a programming platform that is affected by m... File : oracle_java_cpu_oct_2010.nasl - Type : ACT_GATHER_INFO
2010-10-14	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0768.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source	Url
BID	http://www.securityfocus.com/bid/44011
BUGTRAQ	http://www.securityfocus.com/archive/1/516397/100/0/threaded
CONFIRM	http://support.avaya.com/css/P8/documents/100114315 http://support.avaya.com/css/P8/documents/100114327 http://support.avaya.com/css/P8/documents/100123193 http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-030/index.html http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html http://www.oracle.com/technetwork/topics/security/javacpuoct2010-176258.html http://www.vmware.com/security/advisories/VMSA-2011-0003.html https://bugzilla.redhat.com/show_bug.cgi?id=642215
FEDORA	http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049455... http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049528... http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049702...
GENTOO	http://security.gentoo.org/glsa/glsa-201406-32.xml
HP	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=... http://marc.info/?l=bugtraq&m=134254866602253&w=2
OVAL	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova... https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
REDHAT	http://www.redhat.com/support/errata/RHSA-2010-0768.html http://www.redhat.com/support/errata/RHSA-2010-0770.html http://www.redhat.com/support/errata/RHSA-2010-0807.html http://www.redhat.com/support/errata/RHSA-2010-0865.html http://www.redhat.com/support/errata/RHSA-2010-0873.html http://www.redhat.com/support/errata/RHSA-2010-0935.html http://www.redhat.com/support/errata/RHSA-2010-0987.html http://www.redhat.com/support/errata/RHSA-2011-0152.html http://www.redhat.com/support/errata/RHSA-2011-0880.html
SECUNIA	http://secunia.com/advisories/41967 http://secunia.com/advisories/41972 http://secunia.com/advisories/42377 http://secunia.com/advisories/42432 http://secunia.com/advisories/42974 http://secunia.com/advisories/44954
SUSE	http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html
UBUNTU	http://www.ubuntu.com/usn/USN-1010-1
VUPEN	http://www.vupen.com/english/advisories/2010/3086 http://www.vupen.com/english/advisories/2010/3112 http://www.vupen.com/english/advisories/2011/0134 http://www.vupen.com/english/advisories/2011/0143

Alert History

If you want to see full details history, please login or register.

Date	Informations
2023-03-29 01:14:40	Multiple Updates
2023-03-28 12:03:54	Multiple Updates
2022-10-11 12:11:25	Multiple Updates
2022-10-11 01:03:35	Multiple Updates
2021-05-05 01:07:25	Multiple Updates
2021-05-04 12:12:26	Multiple Updates
2021-04-22 01:13:13	Multiple Updates
2020-05-23 01:42:45	Multiple Updates
2020-05-23 00:26:34	Multiple Updates
2019-07-31 12:03:28	Multiple Updates
2019-03-19 12:03:44	Multiple Updates
2018-11-30 12:03:26	Multiple Updates
2018-10-31 00:20:07	Multiple Updates
2018-10-11 00:19:57	Multiple Updates
2018-10-10 12:03:16	Multiple Updates
2017-09-19 09:23:59	Multiple Updates
2016-08-23 09:24:39	Multiple Updates
2016-06-28 18:19:28	Multiple Updates
2016-04-26 20:07:46	Multiple Updates
2016-03-05 13:26:42	Multiple Updates
2014-10-04 09:24:57	Multiple Updates
2014-07-01 13:24:52	Multiple Updates
2014-06-14 13:29:21	Multiple Updates
2014-02-17 10:57:37	Multiple Updates
2013-11-11 12:38:59	Multiple Updates
2013-05-10 23:33:27	Multiple Updates

Global Informations

Type	Count
Oval ID(s)	22
CPE ID(s)	780
Sources(s)	39
osvdb(s)	1
Openvas Exploit(s)	11
IAVM(s)	3
Nessus® Exploit(s)	43

	Related
10	VMSA-2011-0013
10	VMSA-2011-0003
10	USN-1010-1
10	RHSA-2011:0152
10	RHSA-2010:0987
10	RHSA-2010:0935
10	RHSA-2010:0873
10	RHSA-2010:0865
10	RHSA-2010:0807
10	RHSA-2010:0770
10	RHSA-2010:0768
10	HPSBUX02608 SSR...
10	HPSBMU02799 SSR...
10	GLSA-201406-32
10	GLSA-201111-02
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 15 more Alert(s)

10 - CVE-2010-3574

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

OVAL Definitions

CPE : Common Platform Enumeration

OpenVAS Exploits

Open Source Vulnerability Database (OSVDB)

Information Assurance Vulnerability Management (IAVM)

Nessus® Vulnerability Scanner

Sources (Detail)

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU