Vulnerability CVE-2010-3860


Published: 2010-12-08   Modified: 2012-02-13

Description:
IcedTea 1.7.x before 1.7.6, 1.8.x before 1.8.3, and 1.9.x before 1.9.2, as based on OpenJDK 6, declares multiple sensitive variables as public, which allows remote attackers to obtain sensitive information including (1) user.name, (2) user.home, and (3) java.home system properties, and other sensitive information such as installation directories.

Type:

CWE-200

(Information Exposure)

Vendor: Redhat
Product: Icedtea 
Version:
1.9.1
1.9
1.8.2
1.8.1
1.8
1.7
1.6
1.5

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:N/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5/10
2.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
None
None

 References:
https://bugzilla.redhat.com/show_bug.cgi?id=645843
http://icedtea.classpath.org/hg/release/icedtea6-1.9/rev/9aa0018d8c28
http://www.vupen.com/english/advisories/2011/0215
http://www.vupen.com/english/advisories/2010/3108
http://www.vupen.com/english/advisories/2010/3090
http://www.ubuntu.com/usn/USN-1024-1
http://www.securityfocus.com/bid/45114
http://www.redhat.com/support/errata/RHSA-2011-0176.html
http://security.gentoo.org/glsa/glsa-201406-32.xml
http://secunia.com/advisories/43085
http://secunia.com/advisories/42417
http://secunia.com/advisories/42412
http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051711.html
http://blog.fuseyism.com/index.php/2010/11/24/icedtea6-176-183-and-192-released/

Related CVE
CVE-2018-11307
An issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.5. Use of Jackson default typing along with a gadget class from iBatis allows exfiltration of content. Fixed in 2.7.9.4, 2.8.11.2, and 2.9.6.
CVE-2019-13314
virt-bootstrap 1.1.0 allows local users to discover a root password by listing a process, because this password may be present in the --root-password option to virt_bootstrap.py.
CVE-2019-10183
Virt-install(1) utility used to provision new virtual machines has introduced an option '--unattended' to create VMs without user interaction. This option accepts guest VM password as command line arguments, thus leaking them to others users on the s...
CVE-2019-10137
A path traversal flaw was found in spacewalk-proxy, all versions through 2.9, in the way the proxy processes cached client tokens. A remote, unauthenticated attacker could use this flaw to test the existence of arbitrary files, if they have access to...
CVE-2019-10136
It was found that Spacewalk, all versions through 2.9, did not safely compute client token checksums. An attacker with a valid, but expired, authenticated set of headers could move some digits around, artificially extending the session validity witho...
CVE-2019-10177
A stored cross-site scripting (XSS) vulnerability was found in the PDF export component of CloudForms, versions 5.9 and 5.10, due to user input is not properly sanitized. An attacker with least privilege to edit compute is able to execute a XSS attac...
CVE-2019-10164
PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow. Any authenticated user can overflow a stack-based buffer by changing the user's own password to a purpose-crafted value. This often su...
CVE-2019-3896
A double-free can happen in idr_remove_all() in lib/idr.c in the Linux kernel 2.6 branch. An unprivileged local attacker can use this flaw for a privilege escalation or for a system crash and a denial of service (DoS).

Copyright 2019, cxsecurity.com

 

Back to Top