CVE ID:	CVE-2010-3541
Description:	Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to missing validation of request headers in the HttpURLConnection class when they are set by applets, which allows remote attackers to bypass the intended security policy.
Test IDs:	1.3.6.1.4.1.25623.1.0.68441   1.3.6.1.4.1.25623.1.0.68453   1.3.6.1.4.1.25623.1.0.68438
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-3541 BugTraq ID: 44032 http://www.securityfocus.com/bid/44032 Bugtraq: 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX (Google Search) http://www.securityfocus.com/archive/1/516397/100/0/threaded http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049702.html http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049528.html http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049455.html http://security.gentoo.org/glsa/glsa-201406-32.xml HPdes Security Advisory: HPSBMU02799 http://marc.info/?l=bugtraq&m=134254866602253&w=2 HPdes Security Advisory: HPSBUX02608 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c02616748 HPdes Security Advisory: SSRT100333 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c02616748 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12491 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14354 RedHat Security Advisories: RHSA-2010:0768 http://www.redhat.com/support/errata/RHSA-2010-0768.html RedHat Security Advisories: RHSA-2010:0770 http://www.redhat.com/support/errata/RHSA-2010-0770.html RedHat Security Advisories: RHSA-2010:0786 http://www.redhat.com/support/errata/RHSA-2010-0786.html RedHat Security Advisories: RHSA-2010:0807 http://www.redhat.com/support/errata/RHSA-2010-0807.html RedHat Security Advisories: RHSA-2010:0865 http://www.redhat.com/support/errata/RHSA-2010-0865.html RedHat Security Advisories: RHSA-2010:0873 http://www.redhat.com/support/errata/RHSA-2010-0873.html RedHat Security Advisories: RHSA-2010:0986 http://www.redhat.com/support/errata/RHSA-2010-0986.html RedHat Security Advisories: RHSA-2010:0987 http://www.redhat.com/support/errata/RHSA-2010-0987.html RedHat Security Advisories: RHSA-2011:0880 http://www.redhat.com/support/errata/RHSA-2011-0880.html http://secunia.com/advisories/41967 http://secunia.com/advisories/41972 http://secunia.com/advisories/42974 http://secunia.com/advisories/44954 SuSE Security Announcement: SUSE-SA:2010:061 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00005.html SuSE Security Announcement: SUSE-SR:2010:019 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html http://www.ubuntu.com/usn/USN-1010-1 http://www.vupen.com/english/advisories/2010/2745