Design/Logic Flaw

Unspecified vulnerability in the Secure Global Desktop component in Oracle Virtualization 4.6 allows remote attackers to affect integrity via unknown vectors related to Core...

Sun Secure Global Desktop Software (SSGD) contains multiple cross-site scripting vulnerabilities

Overview The Sun Secure Global Desktop SSGD contains cross-site scripting vulnerabilities. Description Sun Secure Global Desktop formerly Tarantella contains multiple input validation vulnerabilities due to failure to properly sanitize user input. The following modules do not properly filter HTML...

CVE-2006-5201

Multiple packages on Sun Solaris, including 1 NSS; 2 Java JDK and JRE 5.0 Update 8 and earlier, SDK and JRE 1.4.x up to 1.4.212, and SDK and JRE 1.3.x up to 1.3.119; 3 JSSE 1.0.303 and earlier; 4 IPSec/IKE; 5 Secure Global Desktop; and 6 StarOffice, when using an RSA key with exponent 3, removes...

CVE-2006-5201

CVE-2006-5201 affects Sun Solaris components (notably NSS, NSS-based libraries, Java JDK/JRE, JSSE, IPSec/IKE, and related Sun products). The root cause is when using an RSA key with exponent 3 that removes PKCS #1 padding prior to hash generation, enabling remote attackers to forge a PKCS #1 v1....

Sun Secure Global Desktop / Tarantella < 4.20.983 Multiple XSS

Sun Secure Global Desktop or Tarantella, a Java-based program for web-enabling applications running on a variety of platforms, is installed on the remote web server. According to the version reported in one of its scripts, the installation of the software on the remote host fails to sanitize...

Sun Secure Global Desktop Detection

Binary data 3759.prm...

Sun Secure Global Desktop / Tarantella < 4.20.983 Multiple XSS

Binary data 3760.prm...

Sun Secure Global Software / Tarantella Detection

The remote host is running Sun Secure Global Software or Tarantella, a Java-based program for web-enabling applications running on a variety of platforms. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid22478;...

CVE-2006-4958

Multiple cross-site scripting XSS vulnerabilities in Sun Secure Global Desktop SSGD, aka Tarantella before 4.20.983 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving 1 taarchives.cgi, 2 ttaAuthentication.jsp, 3 ttalicense.cgi, 4...

CVE-2006-4959

Sun Secure Global Desktop SSGD, aka Tarantella before 4.3 allows remote attackers to obtain sensitive information, including hostnames, versions, and settings details, via unspecified vectors, possibly involving 1 taarchives.cgi, 2 ttaAuthentication.jsp, 3 ttalicense.cgi, 4 ttawlogin.cgi, 5...

CVE-2006-4959

Sun Secure Global Desktop (SSGD, Tarantella) before 4.3 is vulnerable to an information disclosure where remote attackers can obtain hostnames, versions, and settings details via unspecified vectors potentially involving CGI scripts such as taarchives.cgi, ttaAuthentication.jsp, ttalicense.cgi, t...

CVE-2006-4958

Multiple cross-site scripting XSS vulnerabilities in Sun Secure Global Desktop SSGD, aka Tarantella before 4.20.983 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving 1 taarchives.cgi, 2 ttaAuthentication.jsp, 3 ttalicense.cgi, 4...

CVE-2006-4959

Sun Secure Global Desktop SSGD, aka Tarantella before 4.3 allows remote attackers to obtain sensitive information, including hostnames, versions, and settings details, via unspecified vectors, possibly involving 1 taarchives.cgi, 2 ttaAuthentication.jsp, 3 ttalicense.cgi, 4 ttawlogin.cgi, 5...

CVE-2006-4958

Sun Secure Global Desktop (SSGD, Tarantella) contains multiple cross-site scripting vulnerabilities up to build 4.20.983. CERT details enumerate affected modules: taarchives.cgi, ttaAuthentication.jsp, ttalicense.cgi, ttawlogin.cgi, ttawebtop.cgi, ttaabout.cgi, and test-cgi, with the issue allowi...

CVE-2005-0486

Tarantella Secure Global Desktop Enterprise Edition 4.00 and 3.42, and Tarantella Enterprise 3 3.40 and 3.30, when using RSA SecurID and multiple users have the same username, reveals sensitive information during authentication, which allows remote attackers to identify valid usernames and the...