[LSD] Security vulnerability in SUN's Java Virtual Machine implementation

Hello, We have found a security vulnerability in the SUN's implementation of the Java Virtual Machine, which affects the following SDK and JRE releases: - SDK and JRE 1.4.103 and earlier - SDK and JRE 1.3.108 and earlier - SDK and JRE 1.2.2015 and earlier. SUN was informed about this issue on Jun...

JRE/JDK sandbox breaking

By using / instead of . in class name it's possible to bypass sandbox restrictions...

CVE-2003-0470

Buffer overflow in the "RuFSI Utility Class" ActiveX control aka "RuFSI Registry Information Class", as used for the Symantec Security Check service, allows remote attackers to execute arbitrary code via a long argument to CompareVersionStrings...

CVE-2003-0470: Undefined Security Weakness

Buffer overflow in the "RuFSI Utility Class" ActiveX control aka "RuFSI Registry Information Class", as used for the Symantec Security Check service, allows remote attackers to execute arbitrary code via a long argument to CompareVersionStrings...

Symantec Security Check RuFSI - ActiveX Control Buffer Overflow

Symantec Security Check RuFSI - ActiveX Control Buffer Overflow source: https://www.securityfocus.com/bid/8008/info It has been reported that the RuFSI Utility Class is vulnerable to a boundary condition error when invoked with long strings. This could potentially lead to the execution of code wi...

Microsoft Log Sink Class - ActiveX Control Arbitrary File Creation

Microsoft Log Sink Class - ActiveX Control Arbitrary File Creation source: https://www.securityfocus.com/bid/12646/info Microsoft Log Sink Class ActiveX control can allow remote attackers to create arbitrary files on an affected computer. A remote attacker can exploit this issue by crafting a...

samba 2.x call_trans2open() exploit

0day is fragile! one day it's your precious, next day its worthless ... anyways i put together this SAMBAExploit class in python which might be interesting for folks since it's reusable in many other stuff ... python cause; write once a heap, stack or fmt string exploit class and the rest is just...

Lotus Notes / Lotus Domino DoS

update method of CRC32 class causes server to hang...

Sun JDKSDK 1.31.4 IBM JDK 1.3.1 BEA Systems WebLogic 567 - java.util.zip Null Value Denial of Service (1)

Sun JDKSDK 1.31.4 IBM JDK 1.3.1 BEA Systems WebLogic 567 - java.util.zip Null Value Denial of Service 1 source: https://www.securityfocus.com/bid/7109/info Several implementations of the Java Virtual Machine have been reported to be prone to a denial of service condition. This vulnerability occur...

Sun JDK/SDK 1.3/1.4 / IBM JDK 1.3.1 / BEA Systems WebLogic 5/6/7 - java.util.zip Null Value Denial of Service (2)

source: https://www.securityfocus.com/bid/7109/info Several implementations of the Java Virtual Machine have been reported to be prone to a denial of service condition. This vulnerability occurs in several methods in the java.util.zip class. The methods can be called with certain types of...

Sun JDK/SDK 1.3/1.4 / IBM JDK 1.3.1 / BEA Systems WebLogic 5/6/7 - java.util.zip Null Value Denial of Service (1)

source: https://www.securityfocus.com/bid/7109/info Several implementations of the Java Virtual Machine have been reported to be prone to a denial of service condition. This vulnerability occurs in several methods in the java.util.zip class. The methods can be called with certain types of...

Opera 6.07.0 - opera.PluginContext Native Method Denial of Service

Opera 6.07.0 - opera.PluginContext Native Method Denial of Service source: https://www.securityfocus.com/bid/6814/info Opera ships with a trusted Java class 'opera.PluginContext' that includes a native method that is reportedly prone to denial of service attacks. It is possible for a malicious Ja...

CVE-2002-1973

Buffer overflow in CHttpServer::OnParseError in the ISAPI extension Isapi.cpp when built using Microsoft Foundation Class MFC static libraries in Visual C++ 5.0, and 6.0 before SP3, as used in multiple products including BadBlue, allows remote attackers to cause a denial of service access violati...

CVE-2002-1990

Resin 2.0.5 through 2.1.2 allows remote attackers to reveal physical path information via a URL request for the example Java class file HelloServlet...

CVE-2002-2350

Cross-site scripting XSS vulnerability in zusershow.php in dbtreelistpropertymethod.php in Zorum 2.4 allows remote attackers to inject arbitrary web script or HTML via the class parameter...

CVE-2002-1293

The Microsoft Java implementation, as used in Internet Explorer, provides a public load0 method for the CabCracker class com.ms.vm.loader.CabCracker, which allows remote attackers to bypass the security checks that are performed by the load method...

CVE-2002-1295

The CVE-2002-1295 entry concerns the Microsoft Java VM used by Internet Explorer. The vulnerability arises when HTML applet tags bypass Java class restriction checks by supplying the class name in the code parameter, allowing remote attackers to cause a crash (denial of service) and potentially p...

CVE-2002-1295: Undefined Security Weakness

The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service crash and possibly conduct other unauthorized activities via applet tags in HTML that bypass Java class restrictions such as private constructors by providing the class name in th...

Microsoft VM 2000/3000/3100/3188/3200/3300/3802/3805 series - JDBC Class Code Execution

source: https://www.securityfocus.com/bid/5751/info Java Database Connectivity JDBC classes are used by the Virtual Machine to provide connectivity to various data sources. It is possible to spoof a JDBC class request to make it appear as though it came from an authorized applet. This could allow...

CVE-2002-0883

The CVE-2002-0883 entry describes a vulnerability in Compaq ProLiant BL e-Class Integrated Administrator 1.0 and 1.10. Authenticated users with Telnet, SSH, or console access can perform unauthorized activities, with full impact on confidentiality, integrity, and availability per CVSS v2. No expl...