Lucene search

[email protected]CVE-2011-3557

HistoryOct 19, 2011 - 9:55 p.m.

CVE-2011-3557

2011-10-1921:55:01

[email protected]

web.nvd.nist.gov

cve-2011-3557

java runtime environment

oracle java se

jdk

jre

rmi

remote attackers

confidentiality

integrity

availability

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.6 High

AI Score

Confidence

High

0.459 Medium

EPSS

Percentile

97.4%

JSON

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to RMI, a different vulnerability than CVE-2011-3556.

Affected configurations

NVD

Node

sunjdkMatch1.7.0

sunjreMatch1.7.0

Node

oraclejrockitRange≤r28.1.4

oraclejrockitMatchr28.0.0

oraclejrockitMatchr28.0.1

oraclejrockitMatchr28.0.2

oraclejrockitMatchr28.1.0

oraclejrockitMatchr28.1.1

oraclejrockitMatchr28.1.3

Node

sunjdkRange≤1.6.0update_27

sunjdkMatch1.6.0

sunjdkMatch1.6.0update_10

sunjdkMatch1.6.0update_11

sunjdkMatch1.6.0update_12

sunjdkMatch1.6.0update_13

sunjdkMatch1.6.0update_14

sunjdkMatch1.6.0update_15

sunjdkMatch1.6.0update_16

sunjdkMatch1.6.0update_17

sunjdkMatch1.6.0update_18

sunjdkMatch1.6.0update_19

sunjdkMatch1.6.0update_20

sunjdkMatch1.6.0update_21

sunjdkMatch1.6.0update_22

sunjdkMatch1.6.0update_23

sunjdkMatch1.6.0update_24

sunjdkMatch1.6.0update_25

sunjdkMatch1.6.0update_26

sunjdkMatch1.6.0update_3

sunjdkMatch1.6.0update_4

sunjdkMatch1.6.0update_5

sunjdkMatch1.6.0update_6

sunjdkMatch1.6.0update_7

sunjdkMatch1.6.0update1

sunjdkMatch1.6.0update2

sunjreRange≤1.6.0update_27

sunjreMatch1.6.0

sunjreMatch1.6.0update_1

sunjreMatch1.6.0update_10

sunjreMatch1.6.0update_11

sunjreMatch1.6.0update_12

sunjreMatch1.6.0update_13

sunjreMatch1.6.0update_14

sunjreMatch1.6.0update_15

sunjreMatch1.6.0update_16

sunjreMatch1.6.0update_17

sunjreMatch1.6.0update_18

sunjreMatch1.6.0update_19

sunjreMatch1.6.0update_2

sunjreMatch1.6.0update_20

sunjreMatch1.6.0update_21

sunjreMatch1.6.0update_22

sunjreMatch1.6.0update_23

sunjreMatch1.6.0update_24

sunjreMatch1.6.0update_25

sunjreMatch1.6.0update_26

sunjreMatch1.6.0update_3

sunjreMatch1.6.0update_4

sunjreMatch1.6.0update_5

sunjreMatch1.6.0update_6

sunjreMatch1.6.0update_7

Node

sunjdkRange≤1.5.0update31

sunjdkMatch1.5.0

sunjdkMatch1.5.0update1

sunjdkMatch1.5.0update10

sunjdkMatch1.5.0update11

sunjdkMatch1.5.0update11_b03

sunjdkMatch1.5.0update12

sunjdkMatch1.5.0update13

sunjdkMatch1.5.0update14

sunjdkMatch1.5.0update15

sunjdkMatch1.5.0update16

sunjdkMatch1.5.0update17

sunjdkMatch1.5.0update18

sunjdkMatch1.5.0update19

sunjdkMatch1.5.0update2

sunjdkMatch1.5.0update20

sunjdkMatch1.5.0update21

sunjdkMatch1.5.0update22

sunjdkMatch1.5.0update23

sunjdkMatch1.5.0update24

sunjdkMatch1.5.0update25

sunjdkMatch1.5.0update26

sunjdkMatch1.5.0update27

sunjdkMatch1.5.0update28

sunjdkMatch1.5.0update29

sunjdkMatch1.5.0update3

sunjdkMatch1.5.0update4

sunjdkMatch1.5.0update5

sunjdkMatch1.5.0update6

sunjdkMatch1.5.0update7

sunjdkMatch1.5.0update7_b03

sunjdkMatch1.5.0update8

sunjdkMatch1.5.0update9

sunjreRange≤1.5.0update31

sunjreMatch1.5.0

sunjreMatch1.5.0update1

sunjreMatch1.5.0update10

sunjreMatch1.5.0update11

sunjreMatch1.5.0update12

sunjreMatch1.5.0update13

sunjreMatch1.5.0update14

sunjreMatch1.5.0update15

sunjreMatch1.5.0update16

sunjreMatch1.5.0update17

sunjreMatch1.5.0update18

sunjreMatch1.5.0update19

sunjreMatch1.5.0update2

sunjreMatch1.5.0update20

sunjreMatch1.5.0update21

sunjreMatch1.5.0update22

sunjreMatch1.5.0update23

sunjreMatch1.5.0update24

sunjreMatch1.5.0update25

sunjreMatch1.5.0update26

sunjreMatch1.5.0update27

sunjreMatch1.5.0update29

sunjreMatch1.5.0update3

sunjreMatch1.5.0update4

sunjreMatch1.5.0update5

sunjreMatch1.5.0update6

sunjreMatch1.5.0update7

sunjreMatch1.5.0update8

sunjreMatch1.5.0update9

Node

sunjdkRange≤1.4.2_33

sunjdkMatch1.4.2

sunjdkMatch1.4.2_1

sunjdkMatch1.4.2_2

sunjdkMatch1.4.2_3

sunjdkMatch1.4.2_4

sunjdkMatch1.4.2_5

sunjdkMatch1.4.2_6

sunjdkMatch1.4.2_7

sunjdkMatch1.4.2_8

sunjdkMatch1.4.2_9

sunjdkMatch1.4.2_10

sunjdkMatch1.4.2_11

sunjdkMatch1.4.2_12

sunjdkMatch1.4.2_13

sunjdkMatch1.4.2_14

sunjdkMatch1.4.2_15

sunjdkMatch1.4.2_16

sunjdkMatch1.4.2_17

sunjdkMatch1.4.2_18

sunjdkMatch1.4.2_19

sunjdkMatch1.4.2_20

sunjdkMatch1.4.2_21

sunjdkMatch1.4.2_22

sunjdkMatch1.4.2_23

sunjdkMatch1.4.2_24

sunjdkMatch1.4.2_25

sunjdkMatch1.4.2_26

sunjdkMatch1.4.2_27

sunjdkMatch1.4.2_28

sunjdkMatch1.4.2_29

sunjdkMatch1.4.2_30

sunjdkMatch1.4.2_31

sunjdkMatch1.4.2_32

sunjreRange≤1.4.2_33

sunjreMatch1.4.2

sunjreMatch1.4.2_1

sunjreMatch1.4.2_2

sunjreMatch1.4.2_3

sunjreMatch1.4.2_4

sunjreMatch1.4.2_5

sunjreMatch1.4.2_6

sunjreMatch1.4.2_7

sunjreMatch1.4.2_8

sunjreMatch1.4.2_9

sunjreMatch1.4.2_10

sunjreMatch1.4.2_11

sunjreMatch1.4.2_12

sunjreMatch1.4.2_13

sunjreMatch1.4.2_14

sunjreMatch1.4.2_15

sunjreMatch1.4.2_16

sunjreMatch1.4.2_17

sunjreMatch1.4.2_18

sunjreMatch1.4.2_19

sunjreMatch1.4.2_20

sunjreMatch1.4.2_21

sunjreMatch1.4.2_22

sunjreMatch1.4.2_23

sunjreMatch1.4.2_24

sunjreMatch1.4.2_25

sunjreMatch1.4.2_26

sunjreMatch1.4.2_27

sunjreMatch1.4.2_28

sunjreMatch1.4.2_29

sunjreMatch1.4.2_30

sunjreMatch1.4.2_31

sunjreMatch1.4.2_32

CPENameOperatorVersion
sun:jdksun jdkeq1.7.0
sun:jresun jreeq1.7.0

CPE	Name	Operator	Version
sun:jdk	sun jdk	eq	1.7.0
sun:jre	sun jre	eq	1.7.0

References

lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html

lists.opensuse.org/opensuse-security-announce/2012-01/msg00051.html

lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html

marc.info/?l=bugtraq&m=132750579901589&w=2

marc.info/?l=bugtraq&m=133365109612558&w=2

marc.info/?l=bugtraq&m=133728004526190&w=2

marc.info/?l=bugtraq&m=134254866602253&w=2

marc.info/?l=bugtraq&m=134254957702612&w=2

osvdb.org/76506

rhn.redhat.com/errata/RHSA-2012-0508.html

rhn.redhat.com/errata/RHSA-2013-1455.html

secunia.com/advisories/48308

secunia.com/advisories/48692

secunia.com/advisories/48915

secunia.com/advisories/48948

secunia.com/advisories/49198

security.gentoo.org/glsa/glsa-201406-32.xml

www.ibm.com/developerworks/java/jdk/alerts/

www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html

www.redhat.com/support/errata/RHSA-2011-1384.html

www.redhat.com/support/errata/RHSA-2012-0006.html

www.securityfocus.com/bid/50234

www.securitytracker.com/id?1026215

www.ubuntu.com/usn/USN-1263-1

exchange.xforce.ibmcloud.com/vulnerabilities/70836

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14373

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.6 High

AI Score

Confidence

High

0.459 Medium

EPSS

Percentile

97.4%

JSON

Related for CVE-2011-3557

prion2 nvd2 cvelist2 ubuntucve2 cve1 veracode2 openvas65 nessus38 suse6 redhat8 cert1 fedora18 osv2 amazon1 centos1 debian2 oraclelinux1 ubuntu2 securityvulns2 threatpost1 ibm1 seebug1 gentoo2