CVE-2010-4466

2011-02-1700:00:00

ubuntu.com

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.045

Percentile

92.5%

JSON

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle
Java SE and Java for Business 6 Update 23 and earlier for Windows, Solaris,
and, Linux; 5.0 Update 27 and earlier for Windows; and 1.4.2_29 and earlier
for Windows allows remote untrusted Java Web Start applications and
untrusted Java applets to affect confidentiality via unknown vectors
related to Deployment.

Notes

Author	Note
mdeslaur	may not affect openjdk

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchsun-java6< 6.24-1build0.8.04.1UNKNOWN
ubuntu9.10noarchsun-java6< 6.24-1build0.9.10.1UNKNOWN
ubuntu10.04noarchsun-java6< 6.24-1build0.10.04.1UNKNOWN
ubuntu10.10noarchsun-java6< 6.24-1build0.10.10.1UNKNOWN
ubuntu11.04noarchsun-java6< 6.24-1build0.10.10.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	8.04	noarch	sun-java6	< 6.24-1build0.8.04.1	UNKNOWN
ubuntu	9.10	noarch	sun-java6	< 6.24-1build0.9.10.1	UNKNOWN
ubuntu	10.04	noarch	sun-java6	< 6.24-1build0.10.04.1	UNKNOWN
ubuntu	10.10	noarch	sun-java6	< 6.24-1build0.10.10.1	UNKNOWN
ubuntu	11.04	noarch	sun-java6	< 6.24-1build0.10.10.1	UNKNOWN