Tor Project Sets Up Cloud Bridge Project on Amazon EC2

The Tor Project has started a new system designed to help people start and run Tor bridges in the cloud using Amazon’s EC2 platform. The Tor Cloud runs on Amazon’s new micro-instance tier that lets people run instances for free for the first year. Tor is used by people around the world to help...

USN-1263-1: IcedTea-Web, OpenJDK 6 vulnerabilities

Deepak Bhole discovered a flaw in the Same Origin Policy SOP implementation in the IcedTea web browser plugin. This could allow a remote attacker to open connections to certain hosts that should not be permitted. CVE-2011-3377 Juliano Rizzo and Thai Duong discovered that the block-wise AES...

Cisco Unified Communications Manager / Cisco Unified Contact Center Express directory traversal

Directory traversal in embedded web services on TCP/8080 and TCP/9080 ports...

Critical: java-1.6.0-openjdk

Issue Overview: A flaw was found in the Java RMI Remote Method Invocation registry implementation. A remote RMI client could use this flaw to execute arbitrary code on the RMI server running the registry. CVE-2011-3556 A flaw was found in the Java RMI registry implementation. A remote RMI client...

OpenJDK: JAX-WS stack-traces information leak (JAX-WS, 7046794)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JRockit R28.1.4 and earlier allows remote authenticated users to affect confidentiality, related to JAXWS...

OpenJDK: JAX-WS stack-traces information leak (JAX-WS, 7046794)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JRockit R28.1.4 and earlier allows remote authenticated users to affect confidentiality, related to JAXWS...

CVE-2011-3523

Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 10.1.3.5.0 and 10.1.3.5.1 allows remote authenticated users to affect integrity, related to WSM Console, a different vulnerability than CVE-2011-2237...

CVE-2011-2320

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows remote attackers to affect confidentiality via unknown vectors related to Web Services...

CVE-2011-2237

Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 10.1.3.5.0 and 10.1.3.5.1 allows remote authenticated users to affect integrity, related to WSM Console, a different vulnerability than CVE-2011-3523...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 10.1.3.5.0 and 10.1.3.5.1 allows remote authenticated users to affect integrity, related to WSM Console, a different vulnerability than CVE-2011-3523...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows remote attackers to affect confidentiality via unknown vectors related to Web Services...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 10.1.3.5.0 and 10.1.3.5.1 allows remote authenticated users to affect integrity, related to WSM Console, a different vulnerability than CVE-2011-2237...

CVE-2011-2320

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows remote attackers to affect confidentiality via unknown vectors related to Web Services...

CVE-2011-3523

Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 10.1.3.5.0 and 10.1.3.5.1 allows remote authenticated users to affect integrity, related to WSM Console, a different vulnerability than CVE-2011-2237...

CVE-2011-3523

Technical details for CVE-2011-3523 are not provided in the supplied documents. No clear affected components, impact, or fixes are disclosed here. Monitor official advisories for updates.

CVE-2011-2320

CVE-2011-2320 describes an unspecified vulnerability in Oracle WebLogic Server within Oracle Fusion Middleware versions 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 that could allow remote attackers to affect confidentiality via Web Services-related vectors. The NVD entry lists a CVSS2 bas...

CVE-2011-2237

Technical details about CVE-2011-2237 are not provided in the supplied documents. Monitor for updates from NVD/Tenable for affected products, versions, impact, and remediation.

PT-2011-4501

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 10.1.3.5.0 through 10.1.3.5.1 Description The issue affects the integrity of the system, related to WSM Console in the Oracle Web Services Manager component. Recommendations For versions 10.1.3.5.0 and...

PT-2011-3701

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 10.1.3.5.0 through 10.1.3.5.1 Description The issue affects the integrity of the system, related to WSM Console in the Oracle Web Services Manager component. Recommendations For versions 10.1.3.5.0 and...

PT-2011-3772

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 9.2.4.0 through 10.3.5.0 Description The issue affects confidentiality and can be exploited by remote attackers via unknown vectors related to Web Services in the Oracle WebLogic Server component of Oracle Fusio...