CVE ID:	CVE-2010-3860
Description:	IcedTea 1.7.x before 1.7.6, 1.8.x before 1.8.3, and 1.9.x before 1.9.2, as based on OpenJDK 6, declares multiple sensitive variables as public, which allows remote attackers to obtain sensitive information including (1) user.name, (2) user.home, and (3) java.home system properties, and other sensitive information such as installation directories.
Test IDs:	1.3.6.1.4.1.25623.1.0.68679   1.3.6.1.4.1.25623.1.0.68632   1.3.6.1.4.1.25623.1.0.68837   1.3.6.1.4.1.25623.1.0.880546   1.3.6.1.4.1.25623.1.0.870384   1.3.6.1.4.1.25623.1.0.881430
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-3860 BugTraq ID: 45114 http://www.securityfocus.com/bid/45114 http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051711.html http://security.gentoo.org/glsa/glsa-201406-32.xml RedHat Security Advisories: RHSA-2011:0176 http://www.redhat.com/support/errata/RHSA-2011-0176.html http://secunia.com/advisories/42412 http://secunia.com/advisories/42417 http://secunia.com/advisories/43085 SuSE Security Announcement: SUSE-SR:2010:023 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html http://www.ubuntu.com/usn/USN-1024-1 http://www.vupen.com/english/advisories/2010/3090 http://www.vupen.com/english/advisories/2010/3108 http://www.vupen.com/english/advisories/2011/0215