ID CVE-2010-0886
Summary Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE 6 Update 10 through 19 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
References
Vulnerable Configurations
  • cpe:2.3:a:sun:jre:1.6.0:update10
    cpe:2.3:a:sun:jre:1.6.0:update10
  • cpe:2.3:a:sun:jre:1.6.0:update11
    cpe:2.3:a:sun:jre:1.6.0:update11
  • cpe:2.3:a:sun:jre:1.6.0:update12
    cpe:2.3:a:sun:jre:1.6.0:update12
  • cpe:2.3:a:sun:jre:1.6.0:update13
    cpe:2.3:a:sun:jre:1.6.0:update13
  • cpe:2.3:a:sun:jre:1.6.0:update14
    cpe:2.3:a:sun:jre:1.6.0:update14
  • cpe:2.3:a:sun:jre:1.6.0:update15
    cpe:2.3:a:sun:jre:1.6.0:update15
  • cpe:2.3:a:sun:jre:1.6.0:update16
    cpe:2.3:a:sun:jre:1.6.0:update16
  • cpe:2.3:a:sun:jre:1.6.0:update17
    cpe:2.3:a:sun:jre:1.6.0:update17
  • cpe:2.3:a:sun:jre:1.6.0:update18
    cpe:2.3:a:sun:jre:1.6.0:update18
  • cpe:2.3:a:sun:jre:1.6.0:update19
    cpe:2.3:a:sun:jre:1.6.0:update19
  • Microsoft Windows
    cpe:2.3:o:microsoft:windows
  • cpe:2.3:a:sun:jdk:1.6.0:update10
    cpe:2.3:a:sun:jdk:1.6.0:update10
  • cpe:2.3:a:sun:jdk:1.6.0:update11
    cpe:2.3:a:sun:jdk:1.6.0:update11
  • cpe:2.3:a:sun:jdk:1.6.0:update12
    cpe:2.3:a:sun:jdk:1.6.0:update12
  • cpe:2.3:a:sun:jdk:1.6.0:update13
    cpe:2.3:a:sun:jdk:1.6.0:update13
  • cpe:2.3:a:sun:jdk:1.6.0:update14
    cpe:2.3:a:sun:jdk:1.6.0:update14
  • cpe:2.3:a:sun:jdk:1.6.0:update15
    cpe:2.3:a:sun:jdk:1.6.0:update15
  • cpe:2.3:a:sun:jdk:1.6.0:update16
    cpe:2.3:a:sun:jdk:1.6.0:update16
  • cpe:2.3:a:sun:jdk:1.6.0:update17
    cpe:2.3:a:sun:jdk:1.6.0:update17
  • cpe:2.3:a:sun:jdk:1.6.0:update18
    cpe:2.3:a:sun:jdk:1.6.0:update18
  • cpe:2.3:a:sun:jdk:1.6.0:update19
    cpe:2.3:a:sun:jdk:1.6.0:update19
  • Microsoft Windows
    cpe:2.3:o:microsoft:windows
CVSS
Base: 10.0 (as of 21-04-2010 - 15:36)
Impact:
Exploitability:
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
exploit-db via4
  • description Sun Java Web Start Plugin - Command Line Argument Injection (Metasploit). CVE-2010-0886,CVE-2010-1423. Local exploit for Windows platform
    id EDB-ID:41700
    last seen 2017-03-23
    modified 2010-04-09
    published 2010-04-09
    reporter Exploit-DB
    source https://www.exploit-db.com/download/41700/
    title Sun Java Web Start Plugin - Command Line Argument Injection (Metasploit)
  • description Java Deployment Toolkit Performs Insufficient Validation of Parameters. CVE-2010-0886. Remote exploit for windows platform
    id EDB-ID:12117
    last seen 2016-02-01
    modified 2010-04-09
    published 2010-04-09
    reporter Tavis Ormandy
    source https://www.exploit-db.com/download/12117/
    title Java Deployment Toolkit Performs Insufficient Validation of Parameters
  • description Sun Java Web Start Plugin Command Line Argument Injection. CVE-2010-0886. Remote exploit for windows platform
    id EDB-ID:16585
    last seen 2016-02-02
    modified 2010-09-21
    published 2010-09-21
    reporter metasploit
    source https://www.exploit-db.com/download/16585/
    title Sun Java Web Start Plugin Command Line Argument Injection
  • description JAVA Web Start Arbitrary command-line injection. CVE-2010-0886. Remote exploits for multiple platform
    id EDB-ID:12122
    last seen 2016-02-01
    modified 2010-04-09
    published 2010-04-09
    reporter Ruben Santamarta
    source https://www.exploit-db.com/download/12122/
    title JAVA Web Start Arbitrary command-line injection
metasploit via4
description This module exploits a flaw in the Web Start plugin component of Sun Java Web Start. The arguments passed to Java Web Start are not properly validated. By passing the lesser known -J option, an attacker can pass arbitrary options directly to the Java runtime. By utilizing the -XXaltjvm option, as discussed by Ruben Santamarta, an attacker can execute arbitrary code in the context of an unsuspecting browser user. This vulnerability was originally discovered independently by both Ruben Santamarta and Tavis Ormandy. Tavis reported that all versions since version 6 Update 10 "are believed to be affected by this vulnerability." In order for this module to work, it must be ran as root on a server that does not serve SMB. Additionally, the target host must have the WebClient service (WebDAV Mini-Redirector) enabled.
id MSF:EXPLOIT/WINDOWS/BROWSER/JAVA_WS_ARGINJECT_ALTJVM
last seen 2019-03-28
modified 2017-07-24
published 2010-04-16
reliability Excellent
reporter Rapid7
source https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/java_ws_arginject_altjvm.rb
title Sun Java Web Start Plugin Command Line Argument Injection
nessus via4
  • NASL family Windows
    NASL id ORACLE_JAVA6_UPDATE20.NASL
    description The version of Oracle (formerly Sun) Java Runtime Environment (JRE) installed on the remote host is earlier than 6 Update 20. Such versions are potentially missing critical security updates.
    last seen 2019-02-21
    modified 2018-07-17
    plugin id 45544
    published 2010-04-15
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=45544
    title Oracle Java JDK / JRE 6 < Update 20 Multiple Vulnerabilities
  • NASL family Scientific Linux Local Security Checks
    NASL id SL_20100419_JAVA__JDK_1_6_0__ON_SL4_X.NASL
    description This update fixes two vulnerabilities in the Sun Java 6 Runtime Environment and the Sun Java 6 Software Development Kit. Further information about these flaws can be found on the Oracle Security Alert page listed in the References section. (CVE-2010-0886, CVE-2010-0887) All running instances of Sun Java must be restarted for the update to take effect. NOTE: jdk-1.6.0_20-fcs.x86_64.rpm has not been signed. We cannot sign this package without breaking it.
    last seen 2019-02-21
    modified 2019-01-02
    plugin id 60782
    published 2012-08-01
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=60782
    title Scientific Linux Security Update : java (jdk 1.6.0) on SL4.x, SL5.x i386/x86_64
  • NASL family SuSE Local Security Checks
    NASL id SUSE_11_JAVA-1_6_0-SUN-100420.NASL
    description Oracle has released JRE 6 Update 20 in order to fix potential remote code execution vulnerabilities (CVE-2010-0887). Please refer to Oracle's site for more information: http://www.oracle.com/technology/deploy/security/alerts/alert-cve-2010 -0886.html
    last seen 2019-02-21
    modified 2013-11-18
    plugin id 50918
    published 2010-12-02
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=50918
    title SuSE 11 Security Update : Sun Java 1.6.0 (SAT Patch Number 2340)
  • NASL family Red Hat Local Security Checks
    NASL id REDHAT-RHSA-2010-0356.NASL
    description Updated java-1.6.0-sun packages that fix two security issues are now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. The Sun 1.6.0 Java release includes the Sun Java 6 Runtime Environment and the Sun Java 6 Software Development Kit. This update fixes two vulnerabilities in the Sun Java 6 Runtime Environment and the Sun Java 6 Software Development Kit. Further information about these flaws can be found on the Oracle Security Alert page listed in the References section. (CVE-2010-0886, CVE-2010-0887) Users of java-1.6.0-sun should upgrade to these updated packages, which correct these issues. All running instances of Sun Java must be restarted for the update to take effect.
    last seen 2019-02-21
    modified 2018-12-20
    plugin id 46300
    published 2010-05-11
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=46300
    title RHEL 4 / 5 : java-1.6.0-sun (RHSA-2010:0356)
  • NASL family Misc.
    NASL id ORACLE_JAVA6_UPDATE20_UNIX.NASL
    description The version of Oracle (formerly Sun) Java Runtime Environment (JRE) installed on the remote host is earlier than 6 Update 20. Such versions are potentially missing critical security updates. As a result, the remote host could be affected by multiple vulnerabilities.
    last seen 2019-02-21
    modified 2018-07-16
    plugin id 64837
    published 2013-02-22
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=64837
    title Oracle Java JDK / JRE 6 < Update 20 Multiple Vulnerabilities (Unix)
  • NASL family MacOS X Local Security Checks
    NASL id MACOSX_JAVA_10_5_UPDATE7.NASL
    description The remote Mac OS X host is running a version of Java for Mac OS X 10.5 that is missing Update 7. The remote version of this software contains several security vulnerabilities, including some that may allow untrusted Java applets to obtain elevated privileges and lead to execution of arbitrary code with the privileges of the current user.
    last seen 2019-02-21
    modified 2018-07-14
    plugin id 46673
    published 2010-05-19
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=46673
    title Mac OS X : Java for Mac OS X 10.5 Update 7
  • NASL family Gentoo Local Security Checks
    NASL id GENTOO_GLSA-201006-18.NASL
    description The remote host is affected by the vulnerability described in GLSA-201006-18 (Oracle JRE/JDK: Multiple vulnerabilities) Multiple vulnerabilities have been reported in the Oracle Java implementation. Please review the CVE identifiers referenced below and the associated Oracle Critical Patch Update Advisory for details. Impact : A remote attacker could exploit these vulnerabilities to cause unspecified impact, possibly including remote execution of arbitrary code. Workaround : There is no known workaround at this time.
    last seen 2019-02-21
    modified 2018-07-11
    plugin id 46807
    published 2010-06-04
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=46807
    title GLSA-201006-18 : Oracle JRE/JDK: Multiple vulnerabilities
  • NASL family VMware ESX Local Security Checks
    NASL id VMWARE_VMSA-2011-0003.NASL
    description a. vCenter Server and vCenter Update Manager update Microsoft SQL Server 2005 Express Edition to Service Pack 3 Microsoft SQL Server 2005 Express Edition (SQL Express) distributed with vCenter Server 4.1 Update 1 and vCenter Update Manager 4.1 Update 1 is upgraded from SQL Express Service Pack 2 to SQL Express Service Pack 3, to address multiple security issues that exist in the earlier releases of Microsoft SQL Express. Customers using other database solutions need not update for these issues. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2008-5416, CVE-2008-0085, CVE-2008-0086, CVE-2008-0107 and CVE-2008-0106 to the issues addressed in MS SQL Express Service Pack 3. b. vCenter Apache Tomcat Management Application Credential Disclosure The Apache Tomcat Manager application configuration file contains logon credentials that can be read by unprivileged local users. The issue is resolved by removing the Manager application in vCenter 4.1 Update 1. If vCenter 4.1 is updated to vCenter 4.1 Update 1 the logon credentials are not present in the configuration file after the update. VMware would like to thank Claudio Criscione of Secure Networking for reporting this issue to us. The Common Vulnerabilities and Exposures Project (cve.mitre.org) has assigned the name CVE-2010-2928 to this issue. c. vCenter Server and ESX, Oracle (Sun) JRE is updated to version 1.6.0_21 Oracle (Sun) JRE update to version 1.6.0_21, which addresses multiple security issues that existed in earlier releases of Oracle (Sun) JRE. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the following names to the security issues fixed in Oracle (Sun) JRE 1.6.0_19: CVE-2009-3555, CVE-2010-0082, CVE-2010-0084, CVE-2010-0085, CVE-2010-0087, CVE-2010-0088, CVE-2010-0089, CVE-2010-0090, CVE-2010-0091, CVE-2010-0092, CVE-2010-0093, CVE-2010-0094, CVE-2010-0095, CVE-2010-0837, CVE-2010-0838, CVE-2010-0839, CVE-2010-0840, CVE-2010-0841, CVE-2010-0842, CVE-2010-0843, CVE-2010-0844, CVE-2010-0845, CVE-2010-0846, CVE-2010-0847, CVE-2010-0848, CVE-2010-0849, CVE-2010-0850. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the following name to the security issue fixed in Oracle (Sun) JRE 1.6.0_20: CVE-2010-0886. d. vCenter Update Manager Oracle (Sun) JRE is updated to version 1.5.0_26 Oracle (Sun) JRE update to version 1.5.0_26, which addresses multiple security issues that existed in earlier releases of Oracle (Sun) JRE. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the following names to the security issues fixed in Oracle (Sun) JRE 1.5.0_26: CVE-2010-3556, CVE-2010-3566, CVE-2010-3567, CVE-2010-3550, CVE-2010-3561, CVE-2010-3573, CVE-2010-3565,CVE-2010-3568, CVE-2010-3569, CVE-2009-3555, CVE-2010-1321, CVE-2010-3548, CVE-2010-3551, CVE-2010-3562, CVE-2010-3571, CVE-2010-3554, CVE-2010-3559, CVE-2010-3572, CVE-2010-3553, CVE-2010-3549, CVE-2010-3557, CVE-2010-3541, CVE-2010-3574. e. vCenter Server and ESX Apache Tomcat updated to version 6.0.28 Apache Tomcat updated to version 6.0.28, which addresses multiple security issues that existed in earlier releases of Apache Tomcat The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the following names to the security issues fixed in Apache Tomcat 6.0.24: CVE-2009-2693, CVE-2009-2901, CVE-2009-2902,i and CVE-2009-3548. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the following names to the security issues fixed in Apache Tomcat 6.0.28: CVE-2010-2227, CVE-2010-1157. f. vCenter Server third-party component OpenSSL updated to version 0.9.8n The version of the OpenSSL library in vCenter Server is updated to 0.9.8n. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2010-0740 and CVE-2010-0433 to the issues addressed in this version of OpenSSL. g. ESX third-party component OpenSSL updated to version 0.9.8p The version of the ESX OpenSSL library is updated to 0.9.8p. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2010-3864 and CVE-2010-2939 to the issues addressed in this update. h. ESXi third-party component cURL updated The version of cURL library in ESXi is updated. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2010-0734 to the issues addressed in this update. i. ESX third-party component pam_krb5 updated The version of pam_krb5 library is updated. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2008-3825 and CVE-2009-1384 to the issues addressed in the update. j. ESX third-party update for Service Console kernel The Service Console kernel is updated to include kernel version 2.6.18-194.11.1. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2010-1084, CVE-2010-2066, CVE-2010-2070, CVE-2010-2226, CVE-2010-2248, CVE-2010-2521, CVE-2010-2524, CVE-2010-0008, CVE-2010-0415, CVE-2010-0437, CVE-2009-4308, CVE-2010-0003, CVE-2010-0007, CVE-2010-0307, CVE-2010-1086, CVE-2010-0410, CVE-2010-0730, CVE-2010-1085, CVE-2010-0291, CVE-2010-0622, CVE-2010-1087, CVE-2010-1173, CVE-2010-1437, CVE-2010-1088, CVE-2010-1187, CVE-2010-1436, CVE-2010-1641, and CVE-2010-3081 to the issues addressed in the update. Notes : - The update also addresses the 64-bit compatibility mode stack pointer underflow issue identified by CVE-2010-3081. This issue was patched in an ESX 4.1 patch prior to the release of ESX 4.1 Update 1 and in a previous ESX 4.0 patch release. - The update also addresses CVE-2010-2240 for ESX 4.0.
    last seen 2019-02-21
    modified 2018-08-06
    plugin id 51971
    published 2011-02-14
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=51971
    title VMSA-2011-0003 : Third-party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX
  • NASL family MacOS X Local Security Checks
    NASL id MACOSX_JAVA_10_6_UPDATE2.NASL
    description The remote Mac OS X host is running a version of Java for Mac OS X 10.6 that is missing Update 2. The remote version of this software contains several security vulnerabilities, including some that may allow untrusted Java applets to obtain elevated privileges and lead to execution of arbitrary code with the privileges of the current user.
    last seen 2019-02-21
    modified 2018-07-14
    plugin id 46674
    published 2010-05-19
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=46674
    title Mac OS X : Java for Mac OS X 10.6 Update 2
  • NASL family Misc.
    NASL id VMWARE_VMSA-2011-0003_REMOTE.NASL
    description The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party components and libraries : - Apache Tomcat - Apache Tomcat Manager - cURL - Java Runtime Environment (JRE) - Kernel - Microsoft SQL Express - OpenSSL - pam_krb5
    last seen 2019-02-21
    modified 2018-08-06
    plugin id 89674
    published 2016-03-04
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=89674
    title VMware ESX / ESXi Third-Party Libraries Multiple Vulnerabilities (VMSA-2011-0003) (remote check)
oval via4
accepted 2014-08-18T04:00:55.405-04:00
class vulnerability
contributors
  • name Scott Quint
    organization DTCC
  • name Dragos Prisaca
    organization G2, Inc.
  • name Maria Mikhno
    organization ALTX-SOFT
definition_extensions
  • comment Java SE Runtime Environment 6 is installed
    oval oval:org.mitre.oval:def:16362
  • comment Java SE Development Kit 6 is installed
    oval oval:org.mitre.oval:def:15831
description Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE 6 Update 10 through 19 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
family windows
id oval:org.mitre.oval:def:14216
status accepted
submitted 2011-11-25T18:04:00.000-05:00
title Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE 6 Update 10 through 19 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
version 8
packetstorm via4
data source https://packetstormsecurity.com/files/download/88645/java_ws_arginject_altjvm.rb.txt
id PACKETSTORM:88645
last seen 2016-12-05
published 2010-04-19
reporter jduck
source https://packetstormsecurity.com/files/88645/Sun-Java-Web-Start-Plugin-Command-Line-Argument-Injection.html
title Sun Java Web Start Plugin Command Line Argument Injection
redhat via4
rpms
  • java-1.6.0-sun-1:1.6.0.20-1jpp.1.el5
  • java-1.6.0-sun-demo-1:1.6.0.20-1jpp.1.el5
  • java-1.6.0-sun-devel-1:1.6.0.20-1jpp.1.el5
  • java-1.6.0-sun-jdbc-1:1.6.0.20-1jpp.1.el5
  • java-1.6.0-sun-plugin-1:1.6.0.20-1jpp.1.el5
  • java-1.6.0-sun-src-1:1.6.0.20-1jpp.1.el5
refmap via4
apple
  • APPLE-SA-2010-05-18-1
  • APPLE-SA-2010-05-18-2
bugtraq 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX
confirm
hp HPSBMU02799
secunia 39819
sunalert
  • 1022294
  • 279590
vupen ADV-2010-1191
saint via4
bid 39492
description Sun Java Web Start command-line argument injection
osvdb 63798
title java_web_start_argument_injection
type client
Last major update 22-08-2016 - 22:01
Published 20-04-2010 - 15:30
Last modified 10-10-2018 - 15:55
Back to Top