REDHAT-BUG-639880: High severity ORACLE OpenJDK vulnerability
Flaws in the CORBA implementation could allow an attacker to execute arbitrary code by misusing permissions granted to certain system objects. (CVE-2010-3554)
The privileged accept method of the ServerSocket class in the Common Object Request Broker Architecture (CORBA) implementation in OpenJDK allowed it to receive connections from any host, instead of just the host of the current connection. An attacker could use this flaw to bypass restrictions defined by network permissions. (CVE-2010-3561)
The CVSSv2 scored upstream is cvss2=7.5/AV:N/AC:L/Au:N/C:P/I:P/A:P
Reference: http://www.oracle.com/technetwork/topics/security/javacpuoct2010-176258.html
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit these flaws?
The reported CVSSv2 vector for the issue scored 7.5 indicates network access, low attack complexity, and no authentication requirement. The CORBA ServerSocket flaw involves receiving connections from hosts other than the host of the current connection.
What security boundaries can be bypassed?
CVE-2010-3561 can bypass restrictions defined by network permissions because the privileged CORBA ServerSocket accept method accepted connections from any host. CVE-2010-3554 could allow arbitrary code execution through misuse of permissions granted to certain system objects.