Published: 14/10/2010 Updated: 19/09/2017

CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10

VMScore: 570

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N

Unspecified vulnerability in the Oracle Communications Messaging Server (Sun Java System Messaging Server) component in Oracle Sun Products Suite 7.0 allows remote malicious users to affect confidentiality and integrity via unknown vectors related to Webmail. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that the Kerberos implementation does not properly check AP-REQ requests, which allows malicious users to cause a denial of service in the JVM. NOTE: CVE has not investigated the apparent discrepancy between the two vendors regarding the consequences of this issue.

Vulnerable Product	Search on Vulmon	Subscribe to Product
oracle sun products suite 7.0

Synopsis Important: java-160-openjdk security and bug fix update Type/Severity Security Advisory: Important Topic Updated java-160-openjdk packages that fix several security issues andtwo bugs are now available for Red Hat Enterprise Linux 5The Red Hat Security Response Team has rated this update as ha ...

Marsh Ray and Steve Dispensa discovered a flaw in the TLS and SSLv3 protocols If an attacker could perform a man in the middle attack at the start of a TLS connection, the attacker could inject arbitrary content at the beginning of the user’s session USN-923-1 disabled SSL/TLS renegotiation by default; this update implements the TLS Renegotiati ...

NVD-CWE-noinfo http://www.securityfocus.com/bid/43963 http://support.avaya.com/css/P8/documents/100114327 http://secunia.com/advisories/41972 http://www.ubuntu.com/usn/USN-1010-1 http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049455.html http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049528.html http://www.us-cert.gov/cas/techalerts/TA10-287A.html http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049702.html http://www.redhat.com/support/errata/RHSA-2010-0768.html http://www.redhat.com/support/errata/RHSA-2010-0865.html http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-030/index.html http://secunia.com/advisories/42377 http://www.vupen.com/english/advisories/2010/3086 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c02616748 http://support.avaya.com/css/P8/documents/100123193 http://security.gentoo.org/glsa/glsa-201406-32.xml https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12398 https://access.redhat.com/errata/RHSA-2010:0768 https://nvd.nist.gov https://usn.ubuntu.com/1010-1/

CVE-2010-3564

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect