CVE-2010-3860

{"id": "CVE-2010-3860", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2010-12-08T20:00:01.370", "references": [{"url": "http://blog.fuseyism.com/index.php/2010/11/24/icedtea6-176-183-and-192-released/", "source": "secalert@redhat.com"}, {"url": "http://icedtea.classpath.org/hg/release/icedtea6-1.9/rev/9aa0018d8c28", "tags": ["Patch"], "source": "secalert@redhat.com"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051711.html", "source": "secalert@redhat.com"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html", "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/42412", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/42417", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/43085", "source": "secalert@redhat.com"}, {"url": "http://security.gentoo.org/glsa/glsa-201406-32.xml", "source": "secalert@redhat.com"}, {"url": "http://www.redhat.com/support/errata/RHSA-2011-0176.html", "source": "secalert@redhat.com"}, {"url": "http://www.securityfocus.com/bid/45114", "source": "secalert@redhat.com"}, {"url": "http://www.ubuntu.com/usn/USN-1024-1", "source": "secalert@redhat.com"}, {"url": "http://www.vupen.com/english/advisories/2010/3090", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://www.vupen.com/english/advisories/2010/3108", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://www.vupen.com/english/advisories/2011/0215", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=645843", "tags": ["Patch"], "source": "secalert@redhat.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "IcedTea 1.7.x before 1.7.6, 1.8.x before 1.8.3, and 1.9.x before 1.9.2, as based on OpenJDK 6, declares multiple sensitive variables as public, which allows remote attackers to obtain sensitive information including (1) user.name, (2) user.home, and (3) java.home system properties, and other sensitive information such as installation directories."}, {"lang": "es", "value": "IcedTea anterior v1.9.2, como el basado en OpenJDK v6, declara m\u00faltiples variables sensibles como p\u00fablicas, lo que permite a atacantes remotos obtener informaci\u00f3n sensible incluida en las propiedades del sistema (1) user.name, (2) user.home, y (3) java.home, y otra informaci\u00f3n referente a los directorios de instalaci\u00f3n. \r\n\r\n"}], "lastModified": "2014-10-04T04:29:42.433", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:redhat:icedtea:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4B92BB0F-7A23-43D6-94EB-A7CDCB067D49", "versionEndIncluding": "1.9.1"}, {"criteria": "cpe:2.3:a:redhat:icedtea:1.5:rc1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "55935550-05A5-4A7A-A4C4-6FFC902944EA"}, {"criteria": "cpe:2.3:a:redhat:icedtea:1.5:rc2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "620D7177-4DC8-4B26-92CF-36CDB26EE655"}, {"criteria": "cpe:2.3:a:redhat:icedtea:1.5:rc3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4C9ABE9A-B40A-4C0E-8EDC-C8CEDC7815FB"}, {"criteria": "cpe:2.3:a:redhat:icedtea:1.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "28570EF8-C777-4AA9-BD96-ADA1D4B09B91"}, {"criteria": "cpe:2.3:a:redhat:icedtea:1.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4833BFF6-1B29-4455-BA90-A11DE1F6D008"}, {"criteria": "cpe:2.3:a:redhat:icedtea:1.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "68D8D8B4-8E82-4D08-9D39-2D94418D06E4"}, {"criteria": "cpe:2.3:a:redhat:icedtea:1.8.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C3AD9684-D2D7-496B-B77A-2798244CB112"}, {"criteria": "cpe:2.3:a:redhat:icedtea:1.8.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C6D37313-09D9-4726-B083-1FD83A602DE3"}, {"criteria": "cpe:2.3:a:redhat:icedtea:1.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3303605E-F164-4B9F-90E5-55E47C1C568B"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}