CVE-2010-3561 Security feature bypass in n/a

What is CVE-2010-3561?

CVE-2010-3561 is a high-severity vulnerability in Sun Jdk, published on 19 Oct 2010. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this involves the use of the privileged accept method in the ServerSocket class, which does not limit which hosts can connect and allows remote attackers to bypass intended network access restrictions.

Which versions are affected by CVE-2010-3561?

It affects 2 products.

Products include Sun Jdk, Sun Jre.

How do I fix CVE-2010-3561?

Apply the vendor's patch.

Is CVE-2010-3561 being exploited?

There is no known exploitation of CVE-2010-3561 in the wild and no public exploit code.

Other vulnerabilities in Sun Jdk

• CVE-2011-3521 Deserialization in n/a Critical 10.0
• CVE-2011-3548 Other in n/a Critical 10.0
• CVE-2011-3549 Other in n/a Critical 10.0
• CVE-2011-3554 Other in n/a Critical 10.0
• CVE-2011-0802 Other in n/a Critical 10.0

All Sun Jdk vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-jmhr-w45r-wv9q.