Oracle Java JDK / JRE 6 < Update 35 SunToolKit getField() and getMethod() Access Issue

The version of Oracle formerly Sun Java Runtime Environment JRE 6.x installed on the remote host is earlier than Update 35. It, therefore, potentially contains two methods that do not properly restrict access to information about other classes. Specifically, the 'getField' and 'getMethod' methods...

Oracle Releases Fix For Java CVE-2012-4681 Flaw

Oracle on Thursday released a new version of Java that included a fix for the CVE-2012-4681 vulnerability that has been used in limited targeted attacks in the last couple of weeks. The release of Java 7 update 7 comes about four days after the Java flaw was publicly disclosed, but several months...

Use of Java Zero-Day Flaws Tied to Nitro Attack Crew

Researchers say that one of the attack groups using the two new Java zero-day vulnerabilities is the same group that was behind an earlier targeted attack campaign from 2011. That group was traced back to China and was essentially running a spear-phishing campaign, but now the crew, known as Nitr...

Oracle Java findMethod findClass Security Bypass

Added: 08/30/2012 CVE: CVE-2012-4681 BID: 55213 OSVDB: 84867 Background Java is a programming language that compiles programs to bytecode, which is then executed inside a Java Virtual Machine. This is optimal for applications that must run on various hardware platforms, such as web applets. Probl...

FreeBSD Ports: openjdk

The remote host is missing an update to the system as announced in the referenced advisory. VID 16846d1e-f1de-11e1-8bd8-0022156e8794 OpenVAS Vulnerability Test $ Description: Auto generated from VID 16846d1e-f1de-11e1-8bd8-0022156e8794 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Oracle Java findMethod findClass Security Bypass

Added: 08/30/2012 CVE: CVE-2012-4681 BID: 55213 OSVDB: 84867 Background Java is a programming language that compiles programs to bytecode, which is then executed inside a Java Virtual Machine. This is optimal for applications that must run on various hardware platforms, such as web applets. Probl...

CVE-2012-3539

CVE-2012-3539 is a duplicate of CVE-2012-4681; the connected data identifies CVE-2012-4681 as an Oracle Java SE JRE Remote Code Execution vulnerability. The issue centers on Java Beans permission checks and sandbox bypass in OpenJDK/OpenJRE affecting Java 7 era components, enabling potential remo...

Immunity Canvas: JAVA_FORNAME_GETFIELD

Name| javaforNamegetField ---|--- CVE| CVE-2012-4681 Exploit Pack| CANVAS Description| Java forName/getField Method Invocation Sandbox Bypass Notes| CVE Name: CVE-2012-4681 VENDOR: Sun Notes: There is a method invocation vulnerability using sun.awt.SunToolkit.getField This vulnerability can then ...

CVE-2012-4681

CVE-2012-4681 affects Oracle Java SE 7 (JRE) up to Update 6, and earlier; vulnerability chain bypasses SecurityManager via beans permission checks and restricted package access, using ClassFinder.findClass and reflection with a trusted immediate caller to reach private fields. Exploitation in the...

VulnCheck KEV: CVE-2012-4681

The Java Runtime Environment JRE component in Oracle Java SE allow for remote code execution...

FreeBSD Ports: opera, linux-opera

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: opera, linux-opera

The remote host is missing an update to the system as announced in the referenced advisory. VID a4a809d8-25c8-11e1-b531-00215c6a37bb OpenVAS Vulnerability Test $ Description: Auto generated from VID a4a809d8-25c8-11e1-b531-00215c6a37bb Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Opera Multiple Vulnerabilities - December11 (Mac OS X)

The host is installed with Opera and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvulndec11macosx.nasl 7029 2017-08-31 11:51:40Z teissa $ Opera Multiple Vulnerabilities - December11 Mac OS X Authors: Rachana Shetty Copyright: Copyright c 2011 Greenbone Networks...

CentOS Update for wireshark CESA-2009:0313 centos3 i386

Check for the Version of wireshark OpenVAS Vulnerability Test CentOS Update for wireshark CESA-2009:0313 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

CVE-2010-4681

CVE-2010-4681 affects Cisco ASA 5500 series appliances running software prior to 8.2(3). The vulnerability allows remote attackers to bypass SMTP inspection by exploiting a prepended space in SMTP traffic, categorized as a partial impact on confidentiality, integrity, and availability. The issue ...

CVE-2009-4681

CVE-2009-4681 affects phpDirectorySource 1.x; the XSS flaw exists in search.php where a malicious value in the st parameter enables remote injection of arbitrary script/HTML. This CVE entry is supported by multiple references (e.g., exploits and advisories) and is listed in NVD. No explicit remed...

CVE-2009-4681

creationtimestamp| type| source ---|---|--- 2009-07-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9226...

openSUSE Security Update : wireshark (wireshark-387)

This update fixes problems that could crash wireshark when processing compressed data and when processing rf5 files CVE-2008-3933, CVE-2008-3934 as well as CVE-2008-4680 USB dissector crash, CVE-2008-4681 Bluetooth RFCOMM dissector crash, CVE-2008-4682 Tamos CommView dissector crash, CVE-2008-468...

wireshark security update

CentOS Errata and Security Advisory CESA-2009:0313 Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program fo...

SuSE Security Summary SUSE-SR:2009:001 (OpenSuSE 10.3)

The remote host is missing updates announced in advisory SUSE-SR:2009:001. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...