CVE ID:	CVE-2011-3377
Description:	The web browser plug-in in IcedTea-Web 1.0.x before 1.0.6 and 1.1.x before 1.1.4 allows remote attackers to bypass the Same Origin Policy (SOP) and execute arbitrary script or establish network connections to unintended hosts via an applet whose origin has the same second-level domain, but a different sub-domain than the targeted domain.
Test IDs:	1.3.6.1.4.1.25623.1.0.122059   1.3.6.1.4.1.25623.1.0.863612   1.3.6.1.4.1.25623.1.0.863808   1.3.6.1.4.1.25623.1.0.70463   1.3.6.1.4.1.25623.1.0.71148   1.3.6.1.4.1.25623.1.0.870653
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2011-3377 BugTraq ID: 50610 http://www.securityfocus.com/bid/50610 Debian Security Information: DSA-2420 (Google Search) http://www.debian.org/security/2012/dsa-2420 https://bugzilla.redhat.com/show_bug.cgi?id=742515 http://www.osvdb.org/76940 RedHat Security Advisories: RHSA-2011:1441 http://rhn.redhat.com/errata/RHSA-2011-1441.html SuSE Security Announcement: openSUSE-SU-2012:0371 (Google Search) http://lists.opensuse.org/opensuse-updates/2012-03/msg00028.html http://www.ubuntu.com/usn/USN-1263-1