CVE-2006-6607

The CVE-2006-6607 vulnerability affects WebSphere Application Server (WAS) used with IBM Tivoli Identity Manager (ITIM) 4.6. The JKS password is exposed via a -Djavax.net.ssl.trustStorePassword command line argument, enabling local users to read the password by inspecting the process or similar m...

CVE-2006-6607

The Java Key Store JKS for WebSphere Application Server WAS for IBM Tivoli Identity Manager ITIM 4.6 places the JKS password in a -Djavax.net.ssl.trustStorePassword command line argument, which allows local users to obtain the password by listing the process or using other methods...

Microsoft Internet Explorer DHTML Script Function Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. This vulnerability is related to how the browser renders DHTML script functions or nonexistent DHTML elements. An attacker could exploit this issue to execute arbitrary code in the context of the affected...

Microsoft Internet Explorer Script Error Handling Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. This vulnerability is related to how the browser handles script errors. An attacker may exploit this vulnerability to execute arbitrary code in the context of the user running the affected browser...

Microsoft Internet Explorer Drag and Drop TIF Folder Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to an information-disclosure vulnerability. An attacker can exploit this issue to access sensitive information that may aid in further attacks. Technologies Affected Avaya Messaging Application Server Avaya S8100 Media Servers Avaya S8100 Media...

IBM WebSphere Application Server 6.0.2.13之前版本多个漏洞

IBM Websphere Application Server是功能强大的WEB应用服务程序。 IBM Websphere Application Server 6.0.2.13之前版本存在多个安全问题，远程攻击者可以利用漏洞获得敏感信息或进行拒绝服务等攻击。 IBM Websphere Application Server 6.0.2 .9 IBM Websphere Application Server 6.0.2 .7 IBM Websphere Application Server 6.0.2 .5 IBM Websphere Application Server 6.0.2 ...

Sun Java系统服务器嵌入式HTTP请求处理漏洞

Sun Java系统应用和WEB服务器都是与J2EE平台兼容的应用服务器。 Sun Java System Application Server在处理HTTP请求时存在漏洞，远程攻击者可能利用此漏洞执行各种攻击。 如果Sun Java System Application Server或Sun Java System Web Server使用Sun Java System Proxy Server的话，由于未能正确地实现HTTP/1.1...

CVE-2006-6276

Sun Java System Proxy Server versions prior to 20061130 are affected by an HTTP request smuggling vulnerability when used with Sun Java System Application Server or Sun Java System Web Server. Exploitation could bypass HTTP request filtering, enable web session hijacking, permit cross-site script...

IBM WebSphere Application Server 6.1.0.3存在多个漏洞

IBM Websphere Application Server是一款企业性质的web应用服务程序。 IBM Websphere Application Server 6.1.0.3存在多个问题，远程攻击者可以利用漏洞进行未授权访问等攻击。 目前没有详细漏洞细节提供。 IBM Websphere Application Server 6.1 .1 IBM Websphere Application Server 6.1 IBM Websphere Application Server 6.1 补丁下载： IBM Websphere Application Server 6.1 IBM...

CVE-2006-6135

Technical details for CVE-2006-6135 are not publicly provided in the supplied documents; risk, affected versions, impact and mitigations are not detailed here. Monitor for updates from NVD/IBM and related advisories.

CVE-2006-6136

IBM WebSphere Application Server 6.1.0 before Fix Pack 3 (6.1.0.3) is affected by a vulnerability where EAL4 authentication checks are not performed at the proper time during the “registering of response operation.” The incident is described as having unknown impact and attack vectors in the CVE ...

CVE-2006-6135

Multiple unspecified vulnerabilities in IBM WebSphere Application Server 6.1.0 before Fix Pack 3 6.1.0.3 have unknown impact and attack vectors, related to 1 a "Potential security vulnerability" PK29725 and 2 "Potential security exposure" PK30831...

SYMSA-2006-011: JBoss Java Class DeploymentFileRepository Directory Traversal

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2006-011 Advisory Title: JBoss Java Class DeploymentFileRepository Directory Traversal Author: Oliver Karow / [email protected] Release Date:...

CVE-2006-5750

Directory traversal vulnerability in the DeploymentFileRepository class in JBoss Application Server jbossas 3.2.4 through 4.0.5 allows remote authenticated users to read or modify arbitrary files, and possibly execute arbitrary code, via unspecified vectors related to the console manager...

CVE-2006-5750

CVE-2006-5750 affects JBoss Application Server (jbossas) versions 3.2.4 through 4.0.5, where the DeploymentFileRepository class (used by the web console/JMX console) can be abused to read or modify arbitrary files and potentially execute code. The root cause is a directory traversal flaw in the D...

security flaw

Directory traversal vulnerability in the DeploymentFileRepository class in JBoss Application Server jbossas 3.2.4 through 4.0.5 allows remote authenticated users to read or modify arbitrary files, and possibly execute arbitrary code, via unspecified vectors related to the console manager...

CVE-2006-6011

Unspecified vulnerability in SAP Web Application Server before 6.40 patch 6 allows remote attackers to cause a denial of service enserver.exe crash via a certain UDP packet to port 64999, aka "two bytes UDP crash," a different vulnerability than CVE-2006-5785...

CVE-2006-6011

CVE-2006-6011 relates to an unspecified vulnerability in SAP Web Application Server that can be exploited remotely to cause a denial of service (enserver.exe crash) via a 0x72F2 UDP sequence on port 64999. Affected: SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66. Remedi...

Apache Struts Error Response Cross-Site Scripting Vulnerability

Struts is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the...

IBM WebSphere Application Server SOAP Connector Error Page XSS

The remote SOAP server fails to sanitize user input via the URI before using it to generate dynamic XML content in an error page. An unauthenticated, remote attacker may be able to leverage this issue to inject arbitrary XML into a user's browser. %NASLMINLEVEL 70300 C Tenable Network Security,...