| Revision Date: | 2014-01-20 | Version: | 6 | | Title: | Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX | | Description: | Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to missing validation of request headers in the HttpURLConnection class when they are set by applets, which allows remote attackers to bypass the intended security policy. | | Family: | unix | Class: | vulnerability | | Status: | ACCEPTED | Reference(s): | CVE-2010-3541
| | Platform(s): | VMWare ESX Server 4.0
VMWare ESX Server 4.1
| Product(s): | | | Definition Synopsis | | Patch ESX400-201103403-SG is not installed VMware ESX Server 4.0 is installed
AND Patch ESX400-201103403-SG is not installed
OR Patch ESX410-201110201-SG is not installed
VMware ESX Server 4.1 is installed
AND Patch ESX410-201110201-SG is not installed
|
|