Description
Unspecified vulnerability in the Oracle Communications Messaging Server (Sun Java System Messaging Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that the Kerberos implementation does not properly check AP-REQ requests, which allows attackers to cause a denial of service in the JVM. NOTE: CVE has not investigated the apparent discrepancy between the two vendors regarding the consequences of this issue.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | java-1.6.0-openjdk +4 | 1:1.6.0.0-1.31.b17.el6_0 | RHSA-2010:0865 |
| RHEL 5 | java-1.6.0-openjdk +4 | 1:1.6.0.0-1.16.b17.el5 | RHSA-2010:0768 |
Advisories 2
- RHSA-2010:0865 Red Hat Security Advisory: java-1.6.0-openjdk security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0768 Red Hat Security Advisory: java-1.6.0-openjdk security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- http://support.avaya.com/css/P8/documents/100114327
- RHSA-2010:0865 vendor-advisory
- GLSA-201406-32 vendor-advisory
- 43963 vdb-entry
- oval:org.mitre.oval:def:12398 vdb-entry signature
- SSRT100333 vendor-advisory
- RHSA-2010:0768 vendor-advisory
- FEDORA-2010-16240 vendor-advisory
- USN-1010-1 vendor-advisory
- http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
- http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-030/index.html
- 41972 third-party-advisory
- ADV-2010-3086 vdb-entry
- http://support.avaya.com/css/P8/documents/100123193
- TA10-287A third-party-advisory
- 42377 third-party-advisory
- FEDORA-2010-16312 vendor-advisory
- FEDORA-2010-16294 vendor-advisory