Sun JDK/JRE: Multiple vulnerabilities

Background The Sun Java Development Kit JDK and the Sun Java Runtime Environment JRE provide the Sun Java platform. Description Multiple vulnerabilities have been discovered in Sun Java: Daniel Soeder discovered that a long codebase attribute string in a JNLP file will overflow a stack variable...

SuSE 10 Security Update : Sun Java (ZYPP Patch Number 5131)

Sun Java was updated to 1.4.2u17 to fix following security vulnerabilities : - Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment JRE and JDK 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.216 and earlier allows remote attackers should gain...

Critical: Red Hat Security Advisory: java-1.5.0-sun security update

Updated java-1.5.0-sun packages that correct several security issues are now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Java Runtime Environment JRE contains the...

CVE-2008-1191

Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier allows remote attackers to create arbitrary files via an untrusted application, a different issue than CVE-2008-1190, aka "The fifth issue."...

Design/Logic Flaw

Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.216 and earlier allows remote attackers to gain privileges via an untrusted application, a different issue than CVE-2008-1191, aka the "fourth" issue...

CVE-2007-1191

The Social Bookmarks del.icio.us plug-in 8F in Quicksilver writes usernames and passwords in plaintext to the /Library/Logs/Console/UID/Console.log file, which allows local users to obtain sensitive information by reading this file...

CVE-2007-1191

The CVE-2007-1191 issue affects the Social Bookmarks (del.icio.us) plug‑in 8F for Quicksilver. The vulnerability detail states that usernames and passwords are written in plaintext to the file /Library/Logs/Console/UID/Console.log, allowing local users to read sensitive information. This is a loc...

CVE-2006-1191

Microsoft Internet Explorer 5.01 through 6 does not always correctly identify the domain that is associated with a browser window, which allows remote attackers to obtain sensitive cross-domain information and spoof sites by running script after the user has navigated to another site...

CVE-2006-1191

Cross-D Domain Information Disclosure vulnerability (CVE-2006-1191) affects IE 5.01–6 and could allow an attacker to read cookies or data from another domain if a user visits a malicious page or opens a malicious email. Exploitation requires user action (visiting a site) and scripting across doma...

CVE-2006-1191

Microsoft Internet Explorer 5.01 through 6 does not always correctly identify the domain that is associated with a browser window, which allows remote attackers to obtain sensitive cross-domain information and spoof sites by running script after the user has navigated to another site...

CVE-2003-1191

Technical details for CVE-2003-1191 are not provided in the connected documents. Public information in the initial description confirms a DoS via HTML in the Name field for e107, but no concrete details beyond that are available here. Monitor for updates.

CVE-2004-1191

Race condition in SuSE Linux 8.1 through 9.2, when run on SMP systems that have more than 4GB of memory, could allow local users to read unauthorized memory from "foreign memory pages."...

CVE-2004-1191

Race condition in SuSE Linux 8.1 through 9.2, when run on SMP systems that have more than 4GB of memory, could allow local users to read unauthorized memory from "foreign memory pages."...

CVE-2004-1191

The CVE-2004-1191 entry concerns a race condition in SuSE Linux releases 8.1–9.2 when run on SMP systems with more than 4 GB of memory. The issue could allow a local user to read unauthorized memory from “foreign memory pages.” The root cause, as described, is a race condition affecting memory ha...

IBM Tivoli SecureWay WebSEAL Proxy Policy Director Encoded URL DoS

The remote web server crashes when an URL ending with %2E is requested. An attacker may use this flaw to cause the server crash continually. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderson nb: domain no longer exists Added BugtraqID and CAN...

CVE-2001-1191

CVE-2001-1191 affects IBM Tivoli SecureWay Policy Director/WebSEAL 3.8 (Proxy Policy Director). The vulnerability allows remote attackers to cause a denial-of-service crash by requesting a URL that ends with %2E. The root cause, as described by OpenVAS/Nessus entries, is how the server processes ...

CVE-1999-1191

CVE-1999-1191 : The vulnerability is a buffer overflow in the chkey utility on Solaris 2.5.1 and earlier. Triggered by a long command-line argument, it allows a local user to ignite a privilege escalation to root. In affected environments, exploitation is local and relies on overflowing the chkey...

CVE-2001-1191

WebSeal in IBM Tivoli SecureWay Policy Director 3.8 allows remote attackers to cause a denial of service crash via a URL that ends in %2e...

CVE-2000-1191

htsearch program in htDig 3.2 beta, 3.1.6, 3.1.5, and earlier allows remote attackers to determine the physical path of the server by requesting a non-existent configuration file using the config parameter, which generates an error message that includes the full path...

CVE-2000-1191

CVE-2000-1191 affects htsearch in htDig up to 3.2 beta, 3.1.6, 3.1.5 and earlier. The vulnerability arises when a non-existent configuration file is requested via the config parameter, causing an error message that reveals the server’s full path. This exposes potential information about the serve...