Oracle Java SE and Java for Business CVE-2010-3573 Same Origin Bypass Vulnerability
BID:44028
Info
Oracle Java SE and Java for Business CVE-2010-3573 Same Origin Bypass Vulnerability
| Bugtraq ID: | 44028 |
| Class: | Origin Validation Error |
| CVE: |
CVE-2010-3573 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 12 2010 12:00AM |
| Updated: | Apr 13 2015 09:45PM |
| Credit: | Roberto Suggi Liverani from Security-Assessment.com |
| Vulnerable: |
VMWare VirtualCenter 2.5.Update 3 build 1 VMWare VirtualCenter 2.5 Update 6 VMWare VirtualCenter 2.5 Update 5 VMWare VirtualCenter 2.5 Update 4 VMWare VirtualCenter 2.5 Update 2 VMWare VirtualCenter 2.5 Update 1 VMWare VirtualCenter 2.5 VMWare Vcenter Update Manager 4.1 VMWare Vcenter Update Manager 4.0 VMWare Vcenter Update Manager 1.0 VMWare vCenter 4.1 Update 1 VMWare vCenter 4.1 VMWare vCenter 4.0 VMWare ESX Server 3.0.3 VMWare ESX Server 4.0 VMWare ESX Server 3.5 VMWare ESX 4.1 Update 1 VMWare ESX 4.1 Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 amd64 SuSE SUSE Linux Enterprise Server 11 SP1 SuSE SUSE Linux Enterprise Server 10 SP3 SuSE SUSE Linux Enterprise SDK 11 SP1 SuSE SUSE Linux Enterprise Java 11 SP1 SuSE SUSE Linux Enterprise Java 10 SP3 SuSE SUSE Linux Enterprise 11 SP1 SuSE SUSE Linux Enterprise 11 Sun JRE (Windows Production Release) 1.6 _17 Sun JRE (Windows Production Release) 1.6 _13 Sun JRE (Windows Production Release) 1.6 _12 Sun JRE (Windows Production Release) 1.6 _10 Sun JRE (Windows Production Release) 1.6 _07 Sun JRE (Windows Production Release) 1.6 _06 Sun JRE (Windows Production Release) 1.6 _05 Sun JRE (Windows Production Release) 1.6 _04 Sun JRE (Windows Production Release) 1.6 Sun JRE (Windows Production Release) 1.5 _22 Sun JRE (Windows Production Release) 1.5 _18 Sun JRE (Windows Production Release) 1.5 _16 Sun JRE (Windows Production Release) 1.5 _15 Sun JRE (Windows Production Release) 1.5 _06 Sun JRE (Windows Production Release) 1.5 _05 Sun JRE (Windows Production Release) 1.5 _04 Sun JRE (Windows Production Release) 1.5 _03 Sun JRE (Windows Production Release) 1.5 _02 Sun JRE (Windows Production Release) 1.5 _01 Sun JRE (Windows Production Release) 1.5 Sun JRE (Windows Production Release) 1.6.0_21 Sun JRE (Windows Production Release) 1.6.0_20 Sun JRE (Windows Production Release) 1.6.0_2 Sun JRE (Windows Production Release) 1.6.0_19 Sun JRE (Windows Production Release) 1.6.0_18 Sun JRE (Windows Production Release) 1.6.0_15 Sun JRE (Windows Production Release) 1.6.0_14 Sun JRE (Windows Production Release) 1.6.0_11 Sun JRE (Windows Production Release) 1.6.0_03 Sun JRE (Windows Production Release) 1.6.0_02 Sun JRE (Windows Production Release) 1.6.0_01 Sun JRE (Windows Production Release) 1.5.0_25 Sun JRE (Windows Production Release) 1.5.0_23 Sun JRE (Windows Production Release) 1.5.0_20 Sun JRE (Windows Production Release) 1.5.0_17 Sun JRE (Windows Production Release) 1.5.0_14 Sun JRE (Windows Production Release) 1.5.0_13 Sun JRE (Windows Production Release) 1.5.0_12 Sun JRE (Windows Production Release) 1.5.0_11 Sun JRE (Windows Production Release) 1.5.0_10 Sun JRE (Windows Production Release) 1.5.0.0_09 Sun JRE (Windows Production Release) 1.5.0.0_08 Sun JRE (Windows Production Release) 1.5.0.0_07 Sun JRE (Solaris Production Release) 1.6 _17 Sun JRE (Solaris Production Release) 1.6 _13 Sun JRE (Solaris Production Release) 1.6 _12 Sun JRE (Solaris Production Release) 1.6 _10 Sun JRE (Solaris Production Release) 1.6 _07 Sun JRE (Solaris Production Release) 1.6 _06 Sun JRE (Solaris Production Release) 1.6 _05 Sun JRE (Solaris Production Release) 1.6 _04 Sun JRE (Solaris Production Release) 1.6 Sun JRE (Solaris Production Release) 1.5 _22 Sun JRE (Solaris Production Release) 1.5 _18 Sun JRE (Solaris Production Release) 1.5 _16 Sun JRE (Solaris Production Release) 1.5 _15 Sun JRE (Solaris Production Release) 1.5 _06 Sun JRE (Solaris Production Release) 1.5 _05 Sun JRE (Solaris Production Release) 1.5 _04 Sun JRE (Solaris Production Release) 1.5 _03 Sun JRE (Solaris Production Release) 1.5 _02 Sun JRE (Solaris Production Release) 1.5 _01 Sun JRE (Solaris Production Release) 1.5 Sun JRE (Solaris Production Release) 1.6.0_21 Sun JRE (Solaris Production Release) 1.6.0_2 Sun JRE (Solaris Production Release) 1.6.0_19 Sun JRE (Solaris Production Release) 1.6.0_18 Sun JRE (Solaris Production Release) 1.6.0_15 Sun JRE (Solaris Production Release) 1.6.0_14 Sun JRE (Solaris Production Release) 1.6.0_11 Sun JRE (Solaris Production Release) 1.6.0_03 Sun JRE (Solaris Production Release) 1.6.0_02 Sun JRE (Solaris Production Release) 1.6.0_01 Sun JRE (Solaris Production Release) 1.5.0_25 Sun JRE (Solaris Production Release) 1.5.0_23 Sun JRE (Solaris Production Release) 1.5.0_20 Sun JRE (Solaris Production Release) 1.5.0_17 Sun JRE (Solaris Production Release) 1.5.0_14 Sun JRE (Solaris Production Release) 1.5.0_13 Sun JRE (Solaris Production Release) 1.5.0_12 Sun JRE (Solaris Production Release) 1.5.0_11 Sun JRE (Solaris Production Release) 1.5.0_10 Sun JRE (Solaris Production Release) 1.5.0.0_09 Sun JRE (Solaris Production Release) 1.5.0.0_08 Sun JRE (Solaris Production Release) 1.5.0.0_07 Sun JRE (Linux Production Release) 1.6 _17 Sun JRE (Linux Production Release) 1.6 _13 Sun JRE (Linux Production Release) 1.6 _12 Sun JRE (Linux Production Release) 1.6 _10 Sun JRE (Linux Production Release) 1.6 _07 Sun JRE (Linux Production Release) 1.6 _06 Sun JRE (Linux Production Release) 1.6 _05 Sun JRE (Linux Production Release) 1.6 _04 Sun JRE (Linux Production Release) 1.6 Sun JRE (Linux Production Release) 1.5 _22 Sun JRE (Linux Production Release) 1.5 _18 Sun JRE (Linux Production Release) 1.5 _16 Sun JRE (Linux Production Release) 1.5 _15 Sun JRE (Linux Production Release) 1.5 _07 Sun JRE (Linux Production Release) 1.5 _06 Sun JRE (Linux Production Release) 1.5 _05 Sun JRE (Linux Production Release) 1.5 _04 Sun JRE (Linux Production Release) 1.5 _03 Sun JRE (Linux Production Release) 1.5 _02 Sun JRE (Linux Production Release) 1.5 _01 Sun JRE (Linux Production Release) 1.5 .0 beta Sun JRE (Linux Production Release) 1.5 Sun JRE (Linux Production Release) 1.6.0_21 Sun JRE (Linux Production Release) 1.6.0_20 Sun JRE (Linux Production Release) 1.6.0_19 Sun JRE (Linux Production Release) 1.6.0_18 Sun JRE (Linux Production Release) 1.6.0_15 Sun JRE (Linux Production Release) 1.6.0_14 Sun JRE (Linux Production Release) 1.6.0_11 Sun JRE (Linux Production Release) 1.6.0_03 Sun JRE (Linux Production Release) 1.6.0_02 Sun JRE (Linux Production Release) 1.6.0_01 Sun JRE (Linux Production Release) 1.5.0_25 Sun JRE (Linux Production Release) 1.5.0_23 Sun JRE (Linux Production Release) 1.5.0_20 Sun JRE (Linux Production Release) 1.5.0_17 Sun JRE (Linux Production Release) 1.5.0_14 Sun JRE (Linux Production Release) 1.5.0_13 Sun JRE (Linux Production Release) 1.5.0_12 Sun JRE (Linux Production Release) 1.5.0_11 Sun JRE (Linux Production Release) 1.5.0_10 Sun JRE (Linux Production Release) 1.5.0_09 Sun JRE (Linux Production Release) 1.5.0_08 Sun JDK (Windows Production Release) 1.6 _17 Sun JDK (Windows Production Release) 1.6 _14 Sun JDK (Windows Production Release) 1.6 _13 Sun JDK (Windows Production Release) 1.6 _11 Sun JDK (Windows Production Release) 1.6 _10 Sun JDK (Windows Production Release) 1.6 _07 Sun JDK (Windows Production Release) 1.6 _06 Sun JDK (Windows Production Release) 1.6 _05 Sun JDK (Windows Production Release) 1.6 _04 Sun JDK (Windows Production Release) 1.6 Sun JDK (Windows Production Release) 1.5 0_10 Sun JDK (Windows Production Release) 1.5 _22 Sun JDK (Windows Production Release) 1.5 _18 Sun JDK (Windows Production Release) 1.5 _17 Sun JDK (Windows Production Release) 1.5 _15 Sun JDK (Windows Production Release) 1.5 _14 Sun JDK (Windows Production Release) 1.5 _02 Sun JDK (Windows Production Release) 1.5 _01 Sun JDK (Windows Production Release) 1.5 .0_05 Sun JDK (Windows Production Release) 1.5 .0_04 Sun JDK (Windows Production Release) 1.5 .0_03 Sun JDK (Windows Production Release) 1.6.0_21 Sun JDK (Windows Production Release) 1.6.0_20 Sun JDK (Windows Production Release) 1.6.0_19 Sun JDK (Windows Production Release) 1.6.0_18 Sun JDK (Windows Production Release) 1.6.0_15 Sun JDK (Windows Production Release) 1.6.0_03 Sun JDK (Windows Production Release) 1.6.0_02 Sun JDK (Windows Production Release) 1.6.0_01-b06 Sun JDK (Windows Production Release) 1.6.0_01 Sun JDK (Windows Production Release) 1.5.0_25 Sun JDK (Windows Production Release) 1.5.0_24 Sun JDK (Windows Production Release) 1.5.0_23 Sun JDK (Windows Production Release) 1.5.0_20 Sun JDK (Windows Production Release) 1.5.0_16 Sun JDK (Windows Production Release) 1.5.0_13 Sun JDK (Windows Production Release) 1.5.0_12 Sun JDK (Windows Production Release) 1.5.0_11-b03 Sun JDK (Windows Production Release) 1.5.0_07-b03 Sun JDK (Windows Production Release) 1.5.0.0_12 Sun JDK (Windows Production Release) 1.5.0.0_11 Sun JDK (Windows Production Release) 1.5.0.0_09 Sun JDK (Windows Production Release) 1.5.0.0_08 Sun JDK (Windows Production Release) 1.5.0.0_06 Sun JDK (Solaris Production Release) 1.6 _17 Sun JDK (Solaris Production Release) 1.6 _14 Sun JDK (Solaris Production Release) 1.6 _13 Sun JDK (Solaris Production Release) 1.6 _11 Sun JDK (Solaris Production Release) 1.6 _10 Sun JDK (Solaris Production Release) 1.6 _07 Sun JDK (Solaris Production Release) 1.6 _06 Sun JDK (Solaris Production Release) 1.6 _05 Sun JDK (Solaris Production Release) 1.6 _04 Sun JDK (Solaris Production Release) 1.6 _01-b06 Sun JDK (Solaris Production Release) 1.6 Sun JDK (Solaris Production Release) 1.5 0_10 Sun JDK (Solaris Production Release) 1.5 0_09 Sun JDK (Solaris Production Release) 1.5 0_03 Sun JDK (Solaris Production Release) 1.5 _22 Sun JDK (Solaris Production Release) 1.5 _18 Sun JDK (Solaris Production Release) 1.5 _17 Sun JDK (Solaris Production Release) 1.5 _15 Sun JDK (Solaris Production Release) 1.5 _14 Sun JDK (Solaris Production Release) 1.5 _11-b03 Sun JDK (Solaris Production Release) 1.5 _07-b03 Sun JDK (Solaris Production Release) 1.5 _06 Sun JDK (Solaris Production Release) 1.5 _02 Sun JDK (Solaris Production Release) 1.5 _01 Sun JDK (Solaris Production Release) 1.5 .0_05 Sun JDK (Solaris Production Release) 1.5 .0_04 Sun JDK (Solaris Production Release) 1.5 .0_03 Sun JDK (Solaris Production Release) 1.6.0_21 Sun JDK (Solaris Production Release) 1.6.0_20 Sun JDK (Solaris Production Release) 1.6.0_19 Sun JDK (Solaris Production Release) 1.6.0_18 Sun JDK (Solaris Production Release) 1.6.0_15 Sun JDK (Solaris Production Release) 1.6.0_03 Sun JDK (Solaris Production Release) 1.6.0_02 Sun JDK (Solaris Production Release) 1.6.0_01 Sun JDK (Solaris Production Release) 1.5.0_25 Sun JDK (Solaris Production Release) 1.5.0_24 Sun JDK (Solaris Production Release) 1.5.0_23 Sun JDK (Solaris Production Release) 1.5.0_20 Sun JDK (Solaris Production Release) 1.5.0_16 Sun JDK (Solaris Production Release) 1.5.0_13 Sun JDK (Solaris Production Release) 1.5.0_12 Sun JDK (Solaris Production Release) 1.5.0_11 Sun JDK (Linux Production Release) 1.6 _17 Sun JDK (Linux Production Release) 1.6 _14 Sun JDK (Linux Production Release) 1.6 _13 Sun JDK (Linux Production Release) 1.6 _11 Sun JDK (Linux Production Release) 1.6 _10 Sun JDK (Linux Production Release) 1.6 _07 Sun JDK (Linux Production Release) 1.6 _06 Sun JDK (Linux Production Release) 1.6 _05 Sun JDK (Linux Production Release) 1.6 _04 Sun JDK (Linux Production Release) 1.6 _01-b06 Sun JDK (Linux Production Release) 1.6 _01 Sun JDK (Linux Production Release) 1.6 Sun JDK (Linux Production Release) 1.5 0_10 Sun JDK (Linux Production Release) 1.5 _22 Sun JDK (Linux Production Release) 1.5 _18 Sun JDK (Linux Production Release) 1.5 _17 Sun JDK (Linux Production Release) 1.5 _15 Sun JDK (Linux Production Release) 1.5 _14 Sun JDK (Linux Production Release) 1.5 _11-b03 Sun JDK (Linux Production Release) 1.5 _07-b03 Sun JDK (Linux Production Release) 1.5 _07 Sun JDK (Linux Production Release) 1.5 _06 Sun JDK (Linux Production Release) 1.5 _02 Sun JDK (Linux Production Release) 1.5 _01 Sun JDK (Linux Production Release) 1.5 .0_05 Sun JDK (Linux Production Release) 1.5 Sun JDK (Linux Production Release) 1.6.0_21 Sun JDK (Linux Production Release) 1.6.0_20 Sun JDK (Linux Production Release) 1.6.0_19 Sun JDK (Linux Production Release) 1.6.0_18 Sun JDK (Linux Production Release) 1.6.0_15 Sun JDK (Linux Production Release) 1.6.0_03 Sun JDK (Linux Production Release) 1.6.0_02 Sun JDK (Linux Production Release) 1.5.0_25 Sun JDK (Linux Production Release) 1.5.0_24 Sun JDK (Linux Production Release) 1.5.0_23 Sun JDK (Linux Production Release) 1.5.0_20 Sun JDK (Linux Production Release) 1.5.0_16 Sun JDK (Linux Production Release) 1.5.0_13 Sun JDK (Linux Production Release) 1.5.0.0_12 Sun JDK (Linux Production Release) 1.5.0.0_11 Sun JDK (Linux Production Release) 1.5.0.0_09 Sun JDK (Linux Production Release) 1.5.0.0_08 Sun JDK (Linux Production Release) 1.5.0.0_04 Sun JDK (Linux Production Release) 1.5.0.0_03 S.u.S.E. openSUSE 11.3 S.u.S.E. openSUSE 11.2 S.u.S.E. openSUSE 11.1 Redhat Network Satellite Server (for RHEL 5) 5.4 Redhat Enterprise Linux WS Extras 4 Redhat Enterprise Linux WS Extras 3 Redhat Enterprise Linux Workstation Supplementary 6 Redhat Enterprise Linux Workstation Optional 6 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Supplementary 5 server Redhat Enterprise Linux Server Supplementary 6 Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node Supplementary 6 Redhat Enterprise Linux HPC Node Optional 6 Redhat Enterprise Linux HPC Node 6 Redhat Enterprise Linux Extras 4.8.z Redhat Enterprise Linux Extras 4 Redhat Enterprise Linux Extras 3 Redhat Enterprise Linux ES Extras 4 Redhat Enterprise Linux ES Extras 3 Redhat Enterprise Linux Desktop Supplementary 6 Redhat Enterprise Linux Desktop Supplementary 5 client Redhat Enterprise Linux Desktop Optional 6 Redhat Enterprise Linux Desktop 6 Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux AS Extras 4 Redhat Enterprise Linux AS Extras 3 Redhat Enterprise Linux 5 Server Redhat Desktop Extras 4 Redhat Desktop Extras 3 Oracle JRockit R28.0.1 Oracle JRockit R28.0.0 Oracle JRockit R27.6.7 Oracle JRockit R27.6.6 Oracle JRockit R27.6.5 Oracle JRockit R27.6.4 Oracle JRockit R27.6.3 Oracle JRockit R27.6.2 Oracle JRockit R27.6.0-50 1.5.0 15 Oracle JRockit R27.6.0 Oracle JRockit R27.1.0 HP HP-UX B.11.31 HP HP-UX B.11.31 HP HP-UX B.11.23 HP HP-UX B.11.23 HP HP-UX B.11.11 HP HP-UX B.11.11 Gentoo Linux Avaya Proactive Contact 3.0.3 Avaya Proactive Contact 3.0.2 Avaya Proactive Contact 3.0 Avaya Aura System Platform 6.0 Avaya Aura System Platform 1.0 Avaya Aura Conferencing 6.0 Standard |
| Not Vulnerable: |
VMWare Vcenter Update Manager 4.1 Update 1 VMWare vCenter 4.1 Update 2 Sun SDK (Windows Production Release) 1.4.2_28 Sun SDK (Solaris Production Release) 1.4.2_28 Sun SDK (Linux Production Release) 1.4.2_28 Sun JRE (Windows Production Release) 1.4.2 _28 Sun JRE (Windows Production Release) 1.5.0_26 Sun JRE (Solaris Production Release) 1.5.0_26 Sun JRE (Solaris Production Release) 1.4.2_28 Sun JRE (Linux Production Release) 1.5.0_26 Sun JRE (Linux Production Release) 1.4.2_28 Sun JDK (Windows Production Release) 1.5.0_26 Sun JDK (Solaris Production Release) 1.5.0_26 Sun JDK (Linux Production Release) 1.5.0_26 Oracle JRE (Windows Production Release) 1.6.0_22 Oracle JRE (Solaris Production Release) 1.6.0_22 Oracle JRE (Linux Production Release) 1.6.0_22 Oracle JDK (Windows Production Release) 1.6.0_22 Oracle JDK (Solaris Production Release) 1.6.0_22 Oracle JDK (Linux Production Release) 1.6.0_22 |
Discussion
Oracle Java SE and Java for Business CVE-2010-3573 Same Origin Bypass Vulnerability
Oracle Java SE and Java for Business are prone to a same-origin-policy-bypass vulnerability.
The vulnerability can be exploited over multiple protocols.
Attackers can exploit this issue to access resources from another origin in the context of another domain. This can facilitate cross-site request-forgery attacks.
This vulnerability affects the following supported versions:
6 Update 21, 5.0 Update 25
Update (October 20, 2010): Reports are currently disputing this issue. We will update this BID when more information is available.
Oracle Java SE and Java for Business are prone to a same-origin-policy-bypass vulnerability.
The vulnerability can be exploited over multiple protocols.
Attackers can exploit this issue to access resources from another origin in the context of another domain. This can facilitate cross-site request-forgery attacks.
This vulnerability affects the following supported versions:
6 Update 21, 5.0 Update 25
Update (October 20, 2010): Reports are currently disputing this issue. We will update this BID when more information is available.
Exploit / POC
Oracle Java SE and Java for Business CVE-2010-3573 Same Origin Bypass Vulnerability
To exploit this issue, an attacker must entice an unsuspecting user into visiting a malicious webpage.
To exploit this issue, an attacker must entice an unsuspecting user into visiting a malicious webpage.
Solution / Fix
Oracle Java SE and Java for Business CVE-2010-3573 Same Origin Bypass Vulnerability
Solution:
Updates are available. Please see the references for more information.
Ubuntu Ubuntu Linux 10.04 powerpc
Ubuntu Ubuntu Linux 9.10 amd64
Solution:
Updates are available. Please see the references for more information.
Ubuntu Ubuntu Linux 10.04 powerpc
-
Ubuntu icedtea-6-jre-cacao_6b18-1.8.2-4ubuntu2_powerpc.deb
http://ports.ubuntu.com/pool/main/o/openjdk-6/icedtea-6-jre-cacao_6b18 -1.8.2-4ubuntu2_powerpc.deb -
Ubuntu icedtea6-plugin_6b18-1.8.2-4ubuntu2_powerpc.deb
http://ports.ubuntu.com/pool/main/o/openjdk-6/icedtea6-plugin_6b18-1.8 .2-4ubuntu2_powerpc.deb -
Ubuntu openjdk-6-dbg_6b18-1.8.2-4ubuntu2_powerpc.deb
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-dbg_6b18-1.8.2 -4ubuntu2_powerpc.deb -
Ubuntu openjdk-6-demo_6b18-1.8.2-4ubuntu2_powerpc.deb
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-demo_6b18-1.8. 2-4ubuntu2_powerpc.deb -
Ubuntu openjdk-6-doc_6b18-1.8.2-4ubuntu2_all.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-doc_ 6b18-1.8.2-4ubuntu2_all.deb -
Ubuntu openjdk-6-jdk_6b18-1.8.2-4ubuntu2_powerpc.deb
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-jdk_6b18-1.8.2 -4ubuntu2_powerpc.deb -
Ubuntu openjdk-6-jre-headless_6b18-1.8.2-4ubuntu2_powerpc.deb
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-jre-headless_6 b18-1.8.2-4ubuntu2_powerpc.deb -
Ubuntu openjdk-6-jre-lib_6b18-1.8.2-4ubuntu2_all.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-jre- lib_6b18-1.8.2-4ubuntu2_all.deb -
Ubuntu openjdk-6-jre-zero_6b18-1.8.2-4ubuntu2_powerpc.deb
http://ports.ubuntu.com/pool/universe/o/openjdk-6/openjdk-6-jre-zero_6 b18-1.8.2-4ubuntu2_powerpc.deb -
Ubuntu openjdk-6-jre_6b18-1.8.2-4ubuntu2_powerpc.deb
http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-jre_6b18-1.8.2 -4ubuntu2_powerpc.deb -
Ubuntu openjdk-6-source_6b18-1.8.2-4ubuntu2_all.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-sour ce_6b18-1.8.2-4ubuntu2_all.deb
Ubuntu Ubuntu Linux 9.10 amd64
-
Ubuntu icedtea-6-jre-cacao_6b18-1.8.2-4ubuntu1~9.10.1_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/icedtea-6-jre- cacao_6b18-1.8.2-4ubuntu1~9.10.1_amd64.deb -
Ubuntu icedtea6-plugin_6b18-1.8.2-4ubuntu1~9.10.1_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/icedtea6-plugi n_6b18-1.8.2-4ubuntu1~9.10.1_amd64.deb -
Ubuntu openjdk-6-dbg_6b18-1.8.2-4ubuntu1~9.10.1_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-dbg_ 6b18-1.8.2-4ubuntu1~9.10.1_amd64.deb -
Ubuntu openjdk-6-demo_6b18-1.8.2-4ubuntu1~9.10.1_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-demo _6b18-1.8.2-4ubuntu1~9.10.1_amd64.deb -
Ubuntu openjdk-6-doc_6b18-1.8.2-4ubuntu1~9.10.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-doc_ 6b18-1.8.2-4ubuntu1~9.10.1_all.deb -
Ubuntu openjdk-6-jdk_6b18-1.8.2-4ubuntu1~9.10.1_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-jdk_ 6b18-1.8.2-4ubuntu1~9.10.1_amd64.deb -
Ubuntu openjdk-6-jre-headless_6b18-1.8.2-4ubuntu1~9.10.1_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-jre- headless_6b18-1.8.2-4ubuntu1~9.10.1_amd64.deb -
Ubuntu openjdk-6-jre-lib_6b18-1.8.2-4ubuntu1~9.10.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-jre- lib_6b18-1.8.2-4ubuntu1~9.10.1_all.deb -
Ubuntu openjdk-6-jre-zero_6b18-1.8.2-4ubuntu1~9.10.1_amd64.deb
http://security.ubuntu.com/ubuntu/pool/universe/o/openjdk-6/openjdk-6- jre-zero_6b18-1.8.2-4ubuntu1~9.10.1_amd64.deb -
Ubuntu openjdk-6-jre_6b18-1.8.2-4ubuntu1~9.10.1_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-jre_ 6b18-1.8.2-4ubuntu1~9.10.1_amd64.deb -
Ubuntu openjdk-6-source_6b18-1.8.2-4ubuntu1~9.10.1_all.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-sour ce_6b18-1.8.2-4ubuntu1~9.10.1_all.deb
References
Oracle Java SE and Java for Business CVE-2010-3573 Same Origin Bypass Vulnerability
References:
References:
- Oracle Homepage (Oracle)
- Oracle JRE - java.net.URLConnection class �?? Same-of-Origin (SOP) Policy Bypass (Roberto Suggi Liverani)
- Re: Security-Assessment.com Advisory: Oracle JRE - java.net.URLConnection class (Mike Duncan
- Security-Assessment.com Advisory: Oracle JRE - java.net.URLConnection class - S (Roberto Suggi Liverani
- ASA-2010-307 java-1.6.0-sun security update (RHSA-2010-0770) (Avaya)
- ASA-2010-308 java-1.6.0-openjdk security and bug fix update (RHSA-2010-0768) (Avaya)
- ASA-2010-347 HPSBUX02608 SSRT100333 rev.1 - HP-UX Running Java, Remote Execution (Avaya)
- HPSBUX02608 SSRT100333 rev.1 - HP-UX Running Java, Remote Execution of Arbitrary (HP)
- Oracle Critical Patch Update Advisory - January 2011 (Oracle)
- Oracle Java SE and Java for Business Critical Patch Update Advisory - October 20 (Oracle)
- RHSA-2010:0770 java-1.6.0-sun security update (Red Hat)