CVE-2010-3860 in IcedTea
Summary
IcedTea 1.7.x before 1.7.6, 1.8.x before 1.8.3, and 1.9.x before 1.9.2, as based on OpenJDK 6, declares multiple sensitive variables as public, which allows remote attackers to obtain sensitive information including (1) user.name, (2) user.home, and (3) java.home system properties, and other sensitive information such as installation directories.
Once again VulDB remains the best source for vulnerability data.
Reservation
10/08/2010
Disclosure
12/08/2010
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 55676 | Red Hat IcedTea Installation information disclosure | 200 | Not defined | Official fix | CVE-2010-3860 |