CVE-2010-3554: Critical severity Sun Java Runtime Environment (JRE) vulnerability
Published Oct 4, 2010
·Updated
Flaws in the CORBA implementation could allow an attacker to execute arbitrary code by misusing permissions granted to certain system objects. (CVE-2010-3554)
The privileged accept method of the ServerSocket class in the Common Object Request Broker Architecture (CORBA) implementation in OpenJDK allowed it to receive connections from any host, instead of just the host of the current connection. An attacker could use this flaw to bypass restrictions defined by network permissions. (CVE-2010-3561)
The CVSSv2 scored upstream is cvss2=7.5/AV:N/AC:L/Au:N/C:P/I:P/A:P
Reference: http://www.oracle.com/technetwork/topics/security/javacpuoct2010-176258.html
Other sources
Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.227, and 1.3.128 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to "permissions granted to certain system objects."
Affected Software
257 affected components
Sun Java Runtime Environment (JRE)<=1.6.0
Sun Java Runtime Environment (JRE)=1.6.0
Sun Java Runtime Environment (JRE)=1.6.0-update_1
Sun Java Runtime Environment (JRE)=1.6.0-update_10
Sun Java Runtime Environment (JRE)=1.6.0-update_11
Sun Java Runtime Environment (JRE)=1.6.0-update_12
Sun Java Runtime Environment (JRE)=1.6.0-update_13
Sun Java Runtime Environment (JRE)=1.6.0-update_14
Sun Java Runtime Environment (JRE)=1.6.0-update_15
Sun Java Runtime Environment (JRE)=1.6.0-update_16
Sun Java Runtime Environment (JRE)=1.6.0-update_17
Sun Java Runtime Environment (JRE)=1.6.0-update_18
Sun Java Runtime Environment (JRE)=1.6.0-update_19
Sun Java Runtime Environment (JRE)=1.6.0-update_2
Sun Java Runtime Environment (JRE)=1.6.0-update_20
Sun Java Runtime Environment (JRE)=1.6.0-update_3
Sun Java Runtime Environment (JRE)=1.6.0-update_4
Sun Java Runtime Environment (JRE)=1.6.0-update_5
Sun Java Runtime Environment (JRE)=1.6.0-update_6
Sun Java Runtime Environment (JRE)=1.6.0-update_7
Java Development Kit (JDK)<=1.6.0
Java Development Kit (JDK)=1.6.0
Java Development Kit (JDK)=1.6.0-update_10
Java Development Kit (JDK)=1.6.0-update_11
Java Development Kit (JDK)=1.6.0-update_12
Java Development Kit (JDK)=1.6.0-update_13
Java Development Kit (JDK)=1.6.0-update_14
Java Development Kit (JDK)=1.6.0-update_15
Java Development Kit (JDK)=1.6.0-update_16
Java Development Kit (JDK)=1.6.0-update_17
Java Development Kit (JDK)=1.6.0-update_18
Java Development Kit (JDK)=1.6.0-update_19
Java Development Kit (JDK)=1.6.0-update_20
Java Development Kit (JDK)=1.6.0-update_3
Java Development Kit (JDK)=1.6.0-update_4
Java Development Kit (JDK)=1.6.0-update_5
Java Development Kit (JDK)=1.6.0-update_6
Java Development Kit (JDK)=1.6.0-update_7
Java Development Kit (JDK)=1.6.0-update1
Java Development Kit (JDK)=1.6.0-update1_b06
Java Development Kit (JDK)=1.6.0-update2
Java Development Kit (JDK)<=1.5.0
Java Development Kit (JDK)=1.5.0
Java Development Kit (JDK)=1.5.0-update1
Java Development Kit (JDK)=1.5.0-update10
Java Development Kit (JDK)=1.5.0-update11
Java Development Kit (JDK)=1.5.0-update12
Java Development Kit (JDK)=1.5.0-update13
Java Development Kit (JDK)=1.5.0-update14
Java Development Kit (JDK)=1.5.0-update15
Java Development Kit (JDK)=1.5.0-update16
Java Development Kit (JDK)=1.5.0-update17
Java Development Kit (JDK)=1.5.0-update18
Java Development Kit (JDK)=1.5.0-update19
Java Development Kit (JDK)=1.5.0-update2
Java Development Kit (JDK)=1.5.0-update20
Java Development Kit (JDK)=1.5.0-update21
Java Development Kit (JDK)=1.5.0-update22
Java Development Kit (JDK)=1.5.0-update23
Java Development Kit (JDK)=1.5.0-update24
Java Development Kit (JDK)=1.5.0-update3
Java Development Kit (JDK)=1.5.0-update4
Java Development Kit (JDK)=1.5.0-update5
Java Development Kit (JDK)=1.5.0-update6
Java Development Kit (JDK)=1.5.0-update7
Java Development Kit (JDK)=1.5.0-update8
Java Development Kit (JDK)=1.5.0-update9
Sun SDK<=1.4.2_27
Sun SDK=1.4.2
Sun SDK=1.4.2_1
Sun SDK=1.4.2_02
Sun SDK=1.4.2_3
Sun SDK=1.4.2_4
Sun SDK=1.4.2_5
Sun SDK=1.4.2_6
Sun SDK=1.4.2_7
Sun SDK=1.4.2_8
Sun SDK=1.4.2_9
Sun SDK=1.4.2_10
Sun SDK=1.4.2_11
Sun SDK=1.4.2_12
Sun SDK=1.4.2_13
Sun SDK=1.4.2_14
Sun SDK=1.4.2_15
Sun SDK=1.4.2_16
Sun SDK=1.4.2_17
Sun SDK=1.4.2_18
Sun SDK=1.4.2_19
Sun SDK=1.4.2_20
Sun SDK=1.4.2_21
Sun SDK=1.4.2_22
Sun SDK=1.4.2_23
Sun SDK=1.4.2_24
Sun SDK=1.4.2_25
Sun SDK=1.4.2_26
Sun Java Runtime Environment (JRE)<=1.5.0
Sun Java Runtime Environment (JRE)=1.5.0
Sun Java Runtime Environment (JRE)=1.5.0-update1
Sun Java Runtime Environment (JRE)=1.5.0-update10
Sun Java Runtime Environment (JRE)=1.5.0-update11
Sun Java Runtime Environment (JRE)=1.5.0-update12
Sun Java Runtime Environment (JRE)=1.5.0-update13
Sun Java Runtime Environment (JRE)=1.5.0-update14
Sun Java Runtime Environment (JRE)=1.5.0-update15
Sun Java Runtime Environment (JRE)=1.5.0-update16
Sun Java Runtime Environment (JRE)=1.5.0-update17
Sun Java Runtime Environment (JRE)=1.5.0-update18
Sun Java Runtime Environment (JRE)=1.5.0-update19
Sun Java Runtime Environment (JRE)=1.5.0-update2
Sun Java Runtime Environment (JRE)=1.5.0-update20
Sun Java Runtime Environment (JRE)=1.5.0-update21
Sun Java Runtime Environment (JRE)=1.5.0-update22
Sun Java Runtime Environment (JRE)=1.5.0-update23
Sun Java Runtime Environment (JRE)=1.5.0-update24
Sun Java Runtime Environment (JRE)=1.5.0-update3
Sun Java Runtime Environment (JRE)=1.5.0-update4
Sun Java Runtime Environment (JRE)=1.5.0-update5
Sun Java Runtime Environment (JRE)=1.5.0-update6
Sun Java Runtime Environment (JRE)=1.5.0-update7
Sun Java Runtime Environment (JRE)=1.5.0-update8
Sun Java Runtime Environment (JRE)=1.5.0-update9
Sun Java Runtime Environment (JRE)<=1.4.2_27
Sun Java Runtime Environment (JRE)=1.4.2
Sun Java Runtime Environment (JRE)=1.4.2_1
Sun Java Runtime Environment (JRE)=1.4.2_2
Sun Java Runtime Environment (JRE)=1.4.2_3
Sun Java Runtime Environment (JRE)=1.4.2_4
Sun Java Runtime Environment (JRE)=1.4.2_5
Sun Java Runtime Environment (JRE)=1.4.2_6
Sun Java Runtime Environment (JRE)=1.4.2_7
Sun Java Runtime Environment (JRE)=1.4.2_8
Sun Java Runtime Environment (JRE)=1.4.2_9
Sun Java Runtime Environment (JRE)=1.4.2_10
Sun Java Runtime Environment (JRE)=1.4.2_11
Sun Java Runtime Environment (JRE)=1.4.2_12
Sun Java Runtime Environment (JRE)=1.4.2_13
Sun Java Runtime Environment (JRE)=1.4.2_14
Sun Java Runtime Environment (JRE)=1.4.2_15
Sun Java Runtime Environment (JRE)=1.4.2_16
Sun Java Runtime Environment (JRE)=1.4.2_17
Sun Java Runtime Environment (JRE)=1.4.2_18
Sun Java Runtime Environment (JRE)=1.4.2_19
Sun Java Runtime Environment (JRE)=1.4.2_20
Sun Java Runtime Environment (JRE)=1.4.2_21
Sun Java Runtime Environment (JRE)=1.4.2_22
Sun Java Runtime Environment (JRE)=1.4.2_23
Sun Java Runtime Environment (JRE)=1.4.2_24
Sun Java Runtime Environment (JRE)=1.4.2_25
Sun Java Runtime Environment (JRE)=1.4.2_26
Java Development Kit (JDK)<=1.3.1_28
Java Development Kit (JDK)=1.3.0
Java Development Kit (JDK)=1.3.0_01
Java Development Kit (JDK)=1.3.0_02
Java Development Kit (JDK)=1.3.0_03
Java Development Kit (JDK)=1.3.0_04
Java Development Kit (JDK)=1.3.0_05
Java Development Kit (JDK)=1.3.1
Java Development Kit (JDK)=1.3.1_01
Java Development Kit (JDK)=1.3.1_01a
Java Development Kit (JDK)=1.3.1_02
Java Development Kit (JDK)=1.3.1_03
Java Development Kit (JDK)=1.3.1_04
Java Development Kit (JDK)=1.3.1_05
Java Development Kit (JDK)=1.3.1_06
Java Development Kit (JDK)=1.3.1_07
Java Development Kit (JDK)=1.3.1_08
Java Development Kit (JDK)=1.3.1_09
Java Development Kit (JDK)=1.3.1_10
Java Development Kit (JDK)=1.3.1_11
Java Development Kit (JDK)=1.3.1_12
Java Development Kit (JDK)=1.3.1_13
Java Development Kit (JDK)=1.3.1_14
Java Development Kit (JDK)=1.3.1_15
Java Development Kit (JDK)=1.3.1_16
Java Development Kit (JDK)=1.3.1_17
Java Development Kit (JDK)=1.3.1_18
Java Development Kit (JDK)=1.3.1_19
Java Development Kit (JDK)=1.3.1_20
Java Development Kit (JDK)=1.3.1_21
Java Development Kit (JDK)=1.3.1_22
Java Development Kit (JDK)=1.3.1_23
Java Development Kit (JDK)=1.3.1_24
Java Development Kit (JDK)=1.3.1_25
Java Development Kit (JDK)=1.3.1_26
Java Development Kit (JDK)=1.3.1_27
Sun Java Runtime Environment (JRE)<=1.3.1_28
Sun Java Runtime Environment (JRE)=1.3.0
Sun Java Runtime Environment (JRE)=1.3.0-update1
Sun Java Runtime Environment (JRE)=1.3.0-update2
Sun Java Runtime Environment (JRE)=1.3.0-update3
Sun Java Runtime Environment (JRE)=1.3.0-update4
Sun Java Runtime Environment (JRE)=1.3.0-update5
Sun Java Runtime Environment (JRE)=1.3.1
Sun Java Runtime Environment (JRE)=1.3.1-update1
Sun Java Runtime Environment (JRE)=1.3.1-update2
Sun Java Runtime Environment (JRE)=1.3.1_2
Sun Java Runtime Environment (JRE)=1.3.1_03
Sun Java Runtime Environment (JRE)=1.3.1_04
Sun Java Runtime Environment (JRE)=1.3.1_05
Sun Java Runtime Environment (JRE)=1.3.1_06
Sun Java Runtime Environment (JRE)=1.3.1_07
Sun Java Runtime Environment (JRE)=1.3.1_08
Sun Java Runtime Environment (JRE)=1.3.1_09
Sun Java Runtime Environment (JRE)=1.3.1_10
Sun Java Runtime Environment (JRE)=1.3.1_11
Sun Java Runtime Environment (JRE)=1.3.1_12
Sun Java Runtime Environment (JRE)=1.3.1_13
Sun Java Runtime Environment (JRE)=1.3.1_14
Sun Java Runtime Environment (JRE)=1.3.1_15
Sun Java Runtime Environment (JRE)=1.3.1_16
Sun Java Runtime Environment (JRE)=1.3.1_17
Sun Java Runtime Environment (JRE)=1.3.1_18
Sun Java Runtime Environment (JRE)=1.3.1_19
Sun Java Runtime Environment (JRE)=1.3.1_20
Sun Java Runtime Environment (JRE)=1.3.1_21
Sun Java Runtime Environment (JRE)=1.3.1_22
Sun Java Runtime Environment (JRE)=1.3.1_23
Sun Java Runtime Environment (JRE)=1.3.1_24
Sun Java Runtime Environment (JRE)=1.3.1_25
Sun Java Runtime Environment (JRE)=1.3.1_26
Sun Java Runtime Environment (JRE)=1.3.1_27
Sun SDK<=1.3.1_28
Sun SDK=1.3.0
Sun SDK=1.3.0_01
Sun SDK=1.3.0_02
Sun SDK=1.3.0_03
Sun SDK=1.3.0_04
Sun SDK=1.3.0_05
Sun SDK=1.3.1
Sun SDK=1.3.1_01
Sun SDK=1.3.1_01a
Sun SDK=1.3.1_02
Sun SDK=1.3.1_03
Sun SDK=1.3.1_04
Sun SDK=1.3.1_05
Sun SDK=1.3.1_06
Sun SDK=1.3.1_07
Sun SDK=1.3.1_08
Sun SDK=1.3.1_09
Sun SDK=1.3.1_10
Sun SDK=1.3.1_11
Sun SDK=1.3.1_12
Sun SDK=1.3.1_13
Sun SDK=1.3.1_14
Sun SDK=1.3.1_15
Sun SDK=1.3.1_16
Sun SDK=1.3.1_17
Sun SDK=1.3.1_18
Sun SDK=1.3.1_19
Sun SDK=1.3.1_20
Sun SDK=1.3.1_21
Sun SDK=1.3.1_22
Sun SDK=1.3.1_23
Sun SDK=1.3.1_24
Sun SDK=1.3.1_25
Sun SDK=1.3.1_26
Sun SDK=1.3.1_27
Remediation
Event History
Oct 4, 2010
Data Sourced
09:37 AM
DescriptionSeverityAffected Software
Oct 19, 2010
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-3554?
CVE-2010-3554 is classified as a high severity vulnerability due to its potential to allow arbitrary code execution.
2
How do I fix CVE-2010-3554?
To fix CVE-2010-3554, upgrade the affected Sun JRE or JDK to a version that includes the security patch.
3
Which versions are affected by CVE-2010-3554?
CVE-2010-3554 affects multiple versions of Sun JRE and JDK, specifically versions 1.6.0 up to update 21 and 1.5.0 up to update 25.
4
What are the possible impacts of CVE-2010-3554?
The exploitation of CVE-2010-3554 could lead to unauthorized access and control over affected systems.
5
Who is impacted by CVE-2010-3554?
Any organization or individual using the vulnerable versions of Sun JRE or JDK is at risk from CVE-2010-3554.