CVE-2010-3564
Unspecified vulnerability in the Oracle Communications Messaging Server (Sun Java System...
Unspecified vulnerability in the Oracle Communications Messaging Server (Sun Java System Messaging Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that the Kerberos implementation does not properly check AP-REQ requests, which allows attackers to cause a denial of service in the JVM. NOTE: CVE has not investigated the apparent discrepancy between the two vendors regarding the consequences of this issue.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in the Oracle Communications Messaging Server (Sun Java System Messaging Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that the Kerberos implementation does not properly check AP-REQ requests, which allows attackers to cause a denial of service in the JVM. NOTE: CVE has not investigated the apparent discrepancy between the two vendors regarding the consequences of this issue.
- Record
CVE-2010-3564- CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:P/I:P/A:N - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the Oracle Communications Messaging Server (Sun Java System Messaging Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that the Kerberos implementation does not properly check AP-REQ requests, which allows attackers to cause a denial of service in the JVM. NOTE: CVE has not investigated the apparent discrepancy between the two vendors regarding the consequences of this issue.
- Record
CVE-2010-3564- Updated
- 2026-11-02
EUVDEUVD-2010-3560 No score
Unspecified vulnerability in the Oracle Communications Messaging Server (Sun Java System Messaging Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that the Kerberos implementation does not properly check AP-REQ requests, which allows attackers to cause a denial of service in the JVM. NOTE: CVE has not investigated the apparent discrepancy between the two vendors regarding the consequences of this issue.
- Record
EUVD-2010-3560- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vgp7-8r7h-qwg6 No score
Unspecified vulnerability in the Oracle Communications Messaging Server (Sun Java System...
Unspecified vulnerability in the Oracle Communications Messaging Server (Sun Java System Messaging Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that the Kerberos implementation does not properly check AP-REQ requests, which allows attackers to cause a denial of service in the JVM. NOTE: CVE has not investigated the apparent discrepancy between the two vendors regarding the consequences of this issue.
- Record
GHSA-vgp7-8r7h-qwg6- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-openjdkRed Hat:enterprise_linux:5::client From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.16.b17.el5 | 1:1.6.0.0-1.16.b17.el5 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.16.b17.el5 | 1:1.6.0.0-1.16.b17.el5 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:5::client From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.16.b17.el5 | 1:1.6.0.0-1.16.b17.el5 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:5::client From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.16.b17.el5 | 1:1.6.0.0-1.16.b17.el5 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:5::client From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.16.b17.el5 | 1:1.6.0.0-1.16.b17.el5 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:5::client From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.16.b17.el5 | 1:1.6.0.0-1.16.b17.el5 |
java-1.6.0-openjdkRed Hat:enterprise_linux:5::server From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.16.b17.el5 | 1:1.6.0.0-1.16.b17.el5 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.16.b17.el5 | 1:1.6.0.0-1.16.b17.el5 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:5::server From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.16.b17.el5 | 1:1.6.0.0-1.16.b17.el5 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:5::server From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.16.b17.el5 | 1:1.6.0.0-1.16.b17.el5 |
Show 26 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:5::server From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.16.b17.el5 | 1:1.6.0.0-1.16.b17.el5 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:5::server From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.16.b17.el5 | 1:1.6.0.0-1.16.b17.el5 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::client From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::client From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::client From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::client From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::client From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::computenode From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::computenode From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::computenode From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::computenode From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::computenode From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::server From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::server From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::server From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::server From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::server From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::workstation From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::workstation From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::workstation From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::workstation From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::workstation From an advisory covering 17 CVEs |
before 1:1.6.0.0-1.31.b17.el6_0 | 1:1.6.0.0-1.31.b17.el6_0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-3564 is a medium vulnerability (CVSS 6.4) in Oracle Sun Products Suite, published October 14, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.09%, the 90th percentile. No source names a fixed version.
References
support.avaya.com/css/P8/documents/100114327
redhat.com/support/errata/RHSA-2010-0865.html
security.gentoo.org/glsa/glsa-201406-32.xml
securityfocus.com/bid/43963
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12398
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c02616748
Show 88 moreShow less
lists.fedoraproject.org/pipermail/package-announce/2010-October/049702.html
ubuntu.com/usn/USN-1010-1
oracle.com/technetwork/topics/security/cpuoct2010-175626.html
hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-030/index.html
secunia.com/advisories/41972
vupen.com/english/advisories/2010/3086
us-cert.gov/cas/techalerts/TA10-287A.html
nvd.nist.gov/vuln/detail/CVE-2010-3564
github.com/advisories/GHSA-vgp7-8r7h-qwg6
access.redhat.com/errata/RHSA-2010:0768
bugzilla.redhat.com/show_bug.cgi?id=533125
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0768.json
cve.org/CVERecord?id=CVE-2009-3555