Sun Java / BlackDown Java sandbox protection bypass

Applet can bypass sandbox limitation to exefute privileged functions...

[SA15671] Java Web Start Sandbox Security Bypass Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Sun Java JRE / Web Start Java Plug-in Untrusted Applet Privilege Escalation

The remote host is using a vulnerable version of Sun Java Runtime Plug-in, an web browser addon used to display Java applets. It has been reported that the JRE Plug-in Security can be bypassed. A remote attacker could exploit this by tricking a user into viewing a maliciously crafted web page...

CVE-2003-1134

CVE-2003-1134 affects Sun Java 1.3.1, 1.4.1, and 1.4.2. The issue is a local denial-of-service (JVM crash) potentially triggered by calling the ClassDepth function with a null parameter, which leads to a crash rather than a null pointer exception. The available connected sources confirm the same ...

CVE-2003-1134

Sun Java 1.3.1, 1.4.1, and 1.4.2 allows local users to cause a denial of service JVM crash, possibly by calling the ClassDepth function with a null parameter, which causes a crash instead of generating a null pointer exception...

CVE-2004-1816

Sun Java System Application Server 7.0 Update 2 and earlier is affected when a SOAP web service expects an array of objects as an argument, leading to denial of service through memory consumption. The provided sources confirm the vulnerability description but do not supply concrete exploit detail...

CVE-2004-1816

Unknown vulnerability in Sun Java System Application Server 7.0 Update 2 and earlier, when a SOAP web service expects an array of objects as an argument, allows remote attackers to cause a denial of service memory consumption...

CVE-2003-1134: Undefined Security Weakness

Sun Java 1.3.1, 1.4.1, and 1.4.2 allows local users to cause a denial of service JVM crash, possibly by calling the ClassDepth function with a null parameter, which causes a crash instead of generating a null pointer exception...

CVE-2004-1816: Undefined Security Weakness

Unknown vulnerability in Sun Java System Application Server 7.0 Update 2 and earlier, when a SOAP web service expects an array of objects as an argument, allows remote attackers to cause a denial of service memory consumption...

CVE-2005-0742

Cross-site scripting XSS vulnerability in Sun Java System Application Server 7 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2005-1150

Unknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier, when running on Windows systems, allows attackers to cause a denial of service hang...

CVE-2005-1232

Buffer overflow in Sun Java System Web Proxy Server aka Sun ONE Proxy Server 3.6 SP6 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2005-1232

Buffer overflow in Sun Java System Web Proxy Server aka Sun ONE Proxy Server 3.6 SP6 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2005-1232

CVE-2005-1232 pertains to Sun Java System Web Proxy Server (also Sun ONE Proxy Server) 3.6 SP6. The vulnerability is described as a buffer overflow that could allow remote code execution via unknown vectors. The connected Nessus plugin cites an upgrade path to 3.6 SP7 or higher as a remediation. ...

CVE-2005-1232: Undefined Security Weakness

Buffer overflow in Sun Java System Web Proxy Server aka Sun ONE Proxy Server 3.6 SP6 allows remote attackers to execute arbitrary code via unknown vectors...

Sun Java System Web Proxy Server Unspecified Remote Overflow

The remote host is running the SunOne Web Proxy. This version is reported vulnerable to a number of remote buffer overflows. Alledgedly, successful exploitation would result in the attacker executing arbitrary commands on the remote SunOne Web Proxy server. C Tenable Network Security, Inc. includ...

[SA14901] Sun Java System Web Proxy Server Unspecified Buffer Overflow

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Sun Java System Web Proxy Server Unspecified Buffer...

Sun Java System Web Proxy Server buffer overflow

No description provided...

CVE-2005-1150

The CVE-2005-1150 entry describes an unknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier when running on Windows, which can allow an attacker to cause a denial of service (hang). The available connected records corroborate the affected product and Windows-based DoS impact but ...

CVE-2005-1150

Unknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier, when running on Windows systems, allows attackers to cause a denial of service hang...