Sun Java System Access Manager Version Detection

This script detects the installed version of Access Manager and sets the version in KB. OpenVAS Vulnerability Test $Id: secpodsjsaccessmanagerdetect.nasl 7076 2017-09-07 11:53:47Z teissa $ Sun Java System Access Manager Version Detection Authors: Sharath S Copyright: Copyright c 2009 SecPod,...

Sun JS Access Manager And OpenSSO Information Disclosure vulnerability

Access Manager or OpenSSO is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sun Java System Access Manager Information Disclosure vulnerability

The host is running Java System Access Manager and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: secpodsjsaccessmanagerinfodiscvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ Sun Java System Access Manager Information Disclosure vulnerability Authors: Sharath S...

Sun JS Access Manager And OpenSSO Information Disclosure vulnerability

The host is running Access Manager or OpenSSO and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: secpodsjsamnopenssoinfodiscvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ Sun JS Access Manager And OpenSSO Information Disclosure vulnerability Authors: Sharath S...

Sun Java System Access Manager Information Disclosure vulnerability

Java System Access Manager is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sun Java System Access Manager Version Detection

This script detects the installed version of Access Manager. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sun Java System Access Manager 7.1 < Patch 2 Multiple Vulnerabilities

Binary data 5132.prm...

Sun Java System Access Manager 7.1 < Patch 3 Multiple Vulnerabilities

Binary data 5133.prm...

CVE-2009-2713

The CDCServlet component in Sun Java System Access Manager 7.0 2005Q4 and 7.1, when Cross Domain Single Sign On CDSSO is enabled, does not ensure that "policy advice" is presented to the correct client, which allows remote attackers to obtain sensitive information via unspecified vectors...

Code injection

Sun Java System Access Manager 6.3 2005Q1, 7.0 2005Q4, and 7.1; and OpenSSO Enterprise 8.0; when AMConfig.properties enables the debug flag, allows local users to discover cleartext passwords by reading debug files...

Cross site scripting

The CDCServlet component in Sun Java System Access Manager 7.0 2005Q4 and 7.1, when Cross Domain Single Sign On CDSSO is enabled, does not ensure that "policy advice" is presented to the correct client, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2009-2712

CVE-2009-2712 affects Sun Java System Access Manager (6.3/2005Q1, 7.0/2005Q4, 7.1) and OpenSSO/OpenSSO Enterprise 8.0. When AMConfig.properties enables the debug flag, local users can read debug files and discover cleartext passwords (information disclosure; confidentiality impact). Patch referen...

CVE-2009-2712

Sun Java System Access Manager 6.3 2005Q1, 7.0 2005Q4, and 7.1; and OpenSSO Enterprise 8.0; when AMConfig.properties enables the debug flag, allows local users to discover cleartext passwords by reading debug files...

CVE-2009-2713

Sun Java System Access Manager 7.0 (2005Q4) and 7.1 with Cross Domain Single Sign On enabled is affected by CVE-2009-2713. The issue is that the CDCServlet component does not ensure policy advice is presented to the correct client, enabling potential information disclosure via unspecified vectors...

CVE-2009-2597

The Sun Java System SJS Access Manager Policy Agent module 2.2 for SJS Web Proxy Server 4.0 allows remote attackers to cause a denial of service daemon crash via a GET request...

CVE-2009-2597

The CVE-2009-2597 entry concerns Sun Java System Web Proxy Server (SJS Web Proxy Server) with the Policy Agent module 2.2. It describes a remote DoS condition where a crafted GET request can trigger a daemon crash, affecting the server. The affected context explicitly notes SJS Web Proxy Server 4...

CVE-2009-2597

The Sun Java System SJS Access Manager Policy Agent module 2.2 for SJS Web Proxy Server 4.0 allows remote attackers to cause a denial of service daemon crash via a GET request...

Sun Java System Access Manager策略代理拒绝服务漏洞

Bugraq ID: 35788 CNCAN ID：CNCAN-2009072507 Sun Java System Access Manager是一款安全单点登录、认证、授权解决方案。 Sun Java System Access Manager策略代理存在安全问题，本地或远程用户可以使Sun Java System Web代理服务器崩溃。 目前没有详细漏洞细节提供。 Sun Java System Access Manager Policy Agent 2.2 厂商解决方案 用户可参考如下安全补丁信息： Sun Java System Access Manager Policy...

Novell Access Manager管理控制台信息泄漏漏洞

Bugraq ID: 35734 Novell Access Manger是一款完整的基于角色的Web 访问管理解决方案。 Novell Access Manger管理控制台存在未明错误，远程攻击者可以利用漏洞访问系统文件获得敏感信息。 目前没有详细漏洞细节提供。 Novell Access Manager 3.1 Novell Access Manager 3 用户可参考如下安全公告获得补丁信息：...

CVE-2009-2268

Cross-site scripting XSS vulnerability in the Cross-Domain Controller CDC servlet in Sun Java System Access Manager 6 2005Q1, 7 2005Q4, and 7.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...