SOL8424 - Java Runtime Environment Vulnerability - CVE-2008-0657

Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to gain privileges through an untrusted application or applet, as demonstrated by an application or applet that grants...

CVE-2008-0730

The 1 Simplified Chinese, 2 Traditional Chinese, 3 Korean, and 4 Thai language input methods in Sun Solaris 10 create files and directories with weak permissions under a .iiim/le and b .Xlocale in home directories, which might allow local users to write to, or read from, the home directories of...

Design/Logic Flaw

The 1 Simplified Chinese, 2 Traditional Chinese, 3 Korean, and 4 Thai language input methods in Sun Solaris 10 create files and directories with weak permissions under a .iiim/le and b .Xlocale in home directories, which might allow local users to write to, or read from, the home directories of...

CVE-2008-0730

Solaris 10 is affected by CVE-2008-0730 via the locale input methods for Simplified Chinese, Traditional Chinese, Korean, and Thai. The vulnerable components create files/directories with weak permissions under .iiim/le and .Xlocale in user home directories, potentially allowing local users to re...

CVE-2008-0730

The 1 Simplified Chinese, 2 Traditional Chinese, 3 Korean, and 4 Thai language input methods in Sun Solaris 10 create files and directories with weak permissions under a .iiim/le and b .Xlocale in home directories, which might allow local users to write to, or read from, the home directories of...

Code injection

Unspecified vulnerability in the USB Mouse STREAMS module usbms in Sun Solaris 9 and 10, when 64-bit mode is enabled, allows local users to cause a denial of service panic via unspecified vectors...

CVE-2008-0718

The CVE-2008-0718 entry concerns Sun Solaris 9/10 where the USB Mouse STREAMS module (usbms) is vulnerable when 64-bit mode is enabled. The vulnerability allows local users to cause a denial of service (panic) via unspecified vectors. The NVD notes a CVSS v2 base score of 4.7 (Medium) with local ...

CVE-2008-0718

Unspecified vulnerability in the USB Mouse STREAMS module usbms in Sun Solaris 9 and 10, when 64-bit mode is enabled, allows local users to cause a denial of service panic via unspecified vectors...

openSUSE 10 Security Update : java-1_6_0-sun (java-1_6_0-sun-4945)

This security update brings SUN Java 1.6.0 to Update 4. The security issues fixed are not yset publically known, but it fixes several ones. It also contains timezone update 2007k. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

CVE-2008-0657

Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to gain privileges via an untrusted 1 application or 2 applet, as demonstrated by an application or applet that grants...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to gain privileges via an untrusted 1 application or 2 applet, as demonstrated by an application or applet that grants...

CVE-2008-0657

CVE-2008-0657 affects Sun JDK/JRE: Java 2 Platform versions in scope include JRE/JDK 6 Update 1 and earlier, and 5.0 Update 13 and earlier. The underlying issue is multiple, unspecified vulnerabilities in the Java Runtime Environment that allow an untrusted application or applet to elevate privil...

CVE-2008-0657

Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to gain privileges via an untrusted 1 application or 2 applet, as demonstrated by an application or applet that grants...

Xxe

The XML parsing code in Sun Java Runtime Environment JDK and JRE 6 Update 3 and earlier processes external entity references even when the "external general entities" property is false, which allows remote attackers to conduct XML external entity XXE attacks and cause a denial of service or acces...

CVE-2008-0628

The XML parsing code in Sun Java Runtime Environment JDK and JRE 6 Update 3 and earlier processes external entity references even when the "external general entities" property is false, which allows remote attackers to conduct XML external entity XXE attacks and cause a denial of service or acces...

CVE-2008-0628

The XML parsing code in Sun Java Runtime Environment JDK and JRE 6 Update 3 and earlier processes external entity references even when the "external general entities" property is false, which allows remote attackers to conduct XML external entity XXE attacks and cause a denial of service or acces...

CVE-2008-0628

CVE-2008-0628 affects Sun Java Runtime Environment (JRE/JDK) 6 Update 3 and earlier. The XML parsing code processes external entity references even when the “external general entities” property is false, enabling an XXE attack that can cause denial of service or allow access to restricted resourc...

openSUSE 10 Security Update : java-1_5_0-sun (java-1_5_0-sun-4940)

This security update brings SUN Java 1.5.0 to update14. The security issues fixed are not yset publically known, but it fixes several ones. It also contains timezone update 2007k. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Solaris 9 (sparc) : 117586-22

IS 6.1: Sun ONE Identity Server. Date this patch was last updated by Sun : Jan/17/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 8 (sparc) : 117586-22

IS 6.1: Sun ONE Identity Server. Date this patch was last updated by Sun : Jan/17/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...