Oracle Solaris Critical Patch Update : oct2012_SRU12_4

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: Kernel. Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability requiring logon to Operating...

CVE-2014-4239

Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Common Agent Container Cacao...

Design/Logic Flaw

Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Common Agent Container Cacao...

CVE-2014-4239

CVE-2014-4239 affects Oracle Solaris via the Common Agent Container (Cacao). Affected platforms include Solaris 8, 9, 10 and 11.1; the issue allows remote authenticated users to compromise confidentiality (partial impact) over a network with single authentication and low attack complexity. Connec...

CVE-2014-4225

Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Patch installation scripts...

CVE-2014-4224

Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11.1 allows local users to affect availability via unknown vectors related to sockfs...

Design/Logic Flaw

Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11.1 allows local users to affect availability via unknown vectors related to sockfs...

Design/Logic Flaw

Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Patch installation scripts...

CVE-2014-4224

Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11.1 allows local users to affect availability via unknown vectors related to sockfs...

CVE-2014-4225

Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Patch installation scripts...

CVE-2014-4239: Undefined Security Weakness

Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Common Agent Container Cacao...

PT-2014-5756

Name of the Vulnerable Software and Affected Versions Oracle Sun Solaris versions 8 through 11.1 Description The issue affects confidentiality and is related to the Common Agent Container Cacao in Oracle Sun Solaris. It can be exploited by remote authenticated users via unknown vectors...

PT-2014-5744

Name of the Vulnerable Software and Affected Versions Oracle Sun Solaris versions 8 through 11.1 Description The issue affects the availability of the system, allowing local users to exploit it via unknown vectors related to sockfs. Recommendations For Oracle Sun Solaris versions 8 through 11.1, ...

CVE-2014-4224: Undefined Security Weakness

Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11.1 allows local users to affect availability via unknown vectors related to sockfs...

CVE-2014-4225: Undefined Security Weakness

Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Patch installation scripts...

PT-2014-5745

Name of the Vulnerable Software and Affected Versions Oracle Sun Solaris version 10 Description The issue affects confidentiality, integrity, and availability. It is related to patch installation scripts, but the exact vectors are unknown. Recommendations For Oracle Sun Solaris version 10, at the...

Multiple Vendors libc/glob(3) Resource Exhaustion (+0day remote ftpd-anon)

No description provided by source. Source: http://securityreason.com/securityalert/7822 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiple Vendors libc/glob3 resource exhaustion +0day remote ftpd-anon Author: Maksymilian Arciemowicz http://netbsd.org/donations/ http://securityreason.com/...

Oracle Sun Java System Web Server - HTTP Response Splitting

No description provided by source...

Oracle Sun GlassFish Enterprise Server - Stored XSS Vulnerability

No description provided by source. Sense of Security - Security Advisory - SOS-11-009 Release Date. 19-Jul-2011 Last Update. - Vendor Notification Date. 23-Mar-2011 Product. Oracle Sun GlassFish Enterprise Server Platform. Java EE Affected versions. 2.1.1 v2.1 Patch069.102 Patch12 build b31g-fcs...

openSUSE Security Update : java-1_6_0-openjdk (java-1_6_0-openjdk-5329) (BEAST)

Oracle/Sun OpenJDK 1.6.0 was updated to the 1.10.4release, fixing lots of bugs and security issues. Please see http://www.oracle.com/technetwork/topics/security/javacpuoct2011-44343 1.html for more details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...