Debian Security Advisory DSA 1111-2 (kernel-source-2.6.8 et. al.)

The remote host is missing an update to kernel-source-2.6.8 et. al. announced via advisory DSA 1111-2. OpenVAS Vulnerability Test $Id: deb11112.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1111-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft...

CVE-2008-0269

Unspecified vulnerability in the dotoprocs function in Sun Solaris 10 allows local users to cause a denial of service panic via unspecified vectors...

Design/Logic Flaw

Unspecified vulnerability in the dotoprocs function in Sun Solaris 10 allows local users to cause a denial of service panic via unspecified vectors...

CVE-2008-0269

CVE-2008-0269 describes an unspecified vulnerability in the dotoprocs function of Solaris 10. The affected product is Sun Solaris 10; the vulnerable component is the dotoprocs function, with the underlying cause not explicitly stated in the provided sources. Impact is a local denial of service (p...

Sun Solaris ICMP DoS

Malformed ICMP packets cause system to crash...

Code injection

Unspecified vulnerability in libdevinfo in Sun Solaris 10 allows local users to access files and gain privileges via unknown vectors, related to login device permissions...

CVE-2008-0242

Unspecified vulnerability in libdevinfo in Sun Solaris 10 allows local users to access files and gain privileges via unknown vectors, related to login device permissions...

CVE-2008-0242

Unspecified vulnerability in libdevinfo in Sun Solaris 10 allows local users to access files and gain privileges via unknown vectors, related to login device permissions...

CVE-2008-0242

Summary: CVE-2008-0242 affects Sun Solaris 10, specifically the libdevinfo component. The vulnerability is described as an unspecified local privilege escalation via login device permissions, enabling a local user to access files and gain privileges. Affected product/area: Sun Solaris 10 (libdevi...

Sun Java运行时环境jpiexp32.dll对象名称空指针引用漏洞

BUGTRAQ ID: 27185 CVECAN ID: CVE-2007-0012 Solaris系统的Java运行时环境（JRE）为JAVA应用程序提供可靠的运行环境。 JRE处理畸形的Applet数据时存在漏洞，远程攻击者可能利用此漏洞导致相关的应用崩溃。 RFC2397标准允许在URI中编码java applet并嵌入到HTML文档中。如果applet被编码为带有未定义name属性对象标签的数据参数的话，并将其传送给Internet Explorer，则解码后将其传送给JVM就会在jpiexp32.dll中触发空指针引用，导致拒绝服务。 Sun JRE 5.0 Update 14...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allow remote attackers to inject arbitrary HTML or web script via the 1 cntry or lang parameters to /idm/login.jsp, 2 resultsForm parameter to /idm/account/findForSelect.jsp, or...

Design/Logic Flaw

/idm/help/index.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows remote attackers to inject frames from arbitrary web sites and conduct phishing attacks via the helpUrl parameter, aka "frame injection."...

CVE-2008-0240

/idm/help/index.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows remote attackers to inject frames from arbitrary web sites and conduct phishing attacks via the helpUrl parameter, aka "frame injection."...

CVE-2008-0239

Multiple cross-site scripting XSS vulnerabilities in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allow remote attackers to inject arbitrary HTML or web script via the 1 cntry or lang parameters to /idm/login.jsp, 2 resultsForm parameter to /idm/account/findForSelect.jsp, or...

CVE-2008-0239

The CVE-2008-0239 issue covers multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager versions 6.0 SP1–SP3, 7.0, and 7.1. The root cause is failure to sanitize user-supplied input in several JSP scripts, allowing remote, unauthenticated attackers to inject arbitra...

CVE-2008-0240

/idm/help/index.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows remote attackers to inject frames from arbitrary web sites and conduct phishing attacks via the helpUrl parameter, aka "frame injection."...

CVE-2008-0239

Multiple cross-site scripting XSS vulnerabilities in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allow remote attackers to inject arbitrary HTML or web script via the 1 cntry or lang parameters to /idm/login.jsp, 2 resultsForm parameter to /idm/account/findForSelect.jsp, or...

CVE-2008-0241

Open redirect vulnerability in /idm/user/login.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the nextPage parameter...

CVE-2008-0240

Sun Java System Identity Manager (versions 6.0 SP1–SP3, 7.0, 7.1) is affected by a vulnerability in /idm/help/index.jsp where the helpUrl parameter can be abused to inject frames from arbitrary sites, enabling phishing-like framing attacks. This aligns with the public CVE-2008-0240 description of...

CVE-2008-0241

CVE-2008-0241 describes an open redirect vulnerability in Sun Java System Identity Manager’s login page. The affected products are Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1. The flaw is due to improper handling of the nextPage parameter in /idm/user/login.jsp, allowing re...