CVE-2009-1672: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment aka JRE 6 Update 13 allows remote attackers to 1 execute arbitrary code via a .jnlp URL in the argument to the launch method, and might allow remote attackers to launch JRE installation processes v...

Sun Java System Identity Manager ext Parameter Arbitrary File Retrieval

The version of Sun Java System Identity Manager hosted on the remote web server fails to sanitize user-supplied input to 'ext' parameter in file 'includes/helpServer.jsp' before using it to display help files. An unauthenticated attacker can exploit this vulnerability to retrieve arbitrary files...

Sun Java Directory Server Information Disclosure Vulnerability (Linux)

This host is running Sun Java Directory Server and is prone to Information Disclosure Vulnerability. OpenVAS Vulnerability Test $Id: secpodsunjavadirserverinfodiscvulnlin.nasl 5122 2017-01-27 12:16:00Z teissa $ Sun Java Directory Server Information Disclosure Vulnerability Linux Authors: Sujit...

Sun Java Directory Server Version Detection (Linux)

This script detects the version of Directory Server and sets the reuslt in KB. OpenVAS Vulnerability Test $Id: secpodsunjavadirserverdetectlin.nasl 7823 2017-11-20 08:54:04Z cfischer $ Sun Java Directory Server Version Detection Linux Authors: Sujit Ghosal Copyright: Copyright c 2009 SecPod,...

Sun Java Directory Server Information Disclosure Vulnerability (Windows)

This host is running Sun Java Directory Server and is prone to Information Disclosure Vulnerability. OpenVAS Vulnerability Test $Id: secpodsunjavadirserverinfodiscvulnwin.nasl 5122 2017-01-27 12:16:00Z teissa $ Sun Java Directory Server Information Disclosure Vulnerability Windows Authors: Sujit...

Sun Java Directory Server Information Disclosure Vulnerability - Windows

Sun Java Directory Server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sun Java Directory Server Information Disclosure Vulnerability - Linux

Sun Java Directory Server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sun Java Directory Server Detection (Windows SMB Login)

Detects the installed version of Sun Java Directory Server. This script detects the version of Directory Server. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Sun Java Directory Server Detection (Linux/Unix SSH Login)

This script detects the version of Directory Server. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sun Java System Identity Manager Account Disclosure

The version of Sun Java System Identity Manager running on the remote host has the following account enumeration vulnerabilities : - The error message for a failed login attempt is different, depending on whether or not a valid username was given. - Requesting...

CVE-2009-1190: Undefined Security Weakness

Algorithmic complexity vulnerability in the java.util.regex.Pattern.compile method in Sun Java Development Kit JDK before 1.6, when used with spring.jar in SpringSource Spring Framework 1.1.0 through 2.5.6 and 3.0.0.M1 through 3.0.0.M2 and dm Server 1.0.0 through 1.0.2, allows remote attackers to...

CVE-2009-1357

CRLF injection vulnerability in da/DA/Login in Sun Java System Delegated Administrator 6.2 through 6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the HELPPAGE parameter...

Crlf injection

CRLF injection vulnerability in da/DA/Login in Sun Java System Delegated Administrator 6.2 through 6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the HELPPAGE parameter...

CVE-2009-1357

CVE-2009-1357 describes a CRLF injection/HTTP response splitting vulnerability in Sun Java System Delegated Administrator (DA) server. Affected are DA 6.2–6.4 (without patches 121581-20 / 121582-20 / 121583-20 depending on platform). The issue arises in the da/DA/Login component via the HELP_PAGE...

CVE-2009-1357

CRLF injection vulnerability in da/DA/Login in Sun Java System Delegated Administrator 6.2 through 6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the HELPPAGE parameter...

FreeBSD : jdk/jre -- Security Vulnerability With Java Plugin (ac619d06-3ef8-11d9-8741-c942c075aa41)

The Sun Java Plugin capability in Java 2 Runtime Environment JRE 1.4.201, 1.4.204, and possibly earlier versions, does not properly restrict access between JavaScript and Java applets during data transfer, which allows remote attackers to load unsafe classes and execute arbitrary code...

Solaris 9 (x86) : 120955-12

AM 7.0x86: Sun Java System Access Manager 2005Q4. Date this patch was last updated by Sun : Nov/03/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; ...

Solaris 9 (sparc) : 120954-12

AM 7.0: Sun Java System Access Manager 2005Q4. Date this patch was last updated by Sun : Nov/03/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Sun Java JDK/JRE Multiple Vulnerabilities (Windows)

This host is installed with Sun Java JDK/JRE and is prone to Multiple Vulnerabilities. OpenVAS Vulnerability Test $Id: gbsunjavajredosvulnwin.nasl 7699 2017-11-08 12:10:34Z santu $ Sun Java JDK/JRE Multiple Vulnerabilities Windows Authors: Sharath S Copyright: Copyright c 2009 Greenbone Networks...

Multiple Java Products Detection (Linux/Unix SSH Login)

Detects the installed version of Java products on Linux systems. It covers the following: - Sun Java - Oracle Java - IBM Java - GCJ The script logs in via ssh, searches for executables SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, a...