CVE-2009-1105

The Java Plug-in in Java SE Development Kit JDK and Java Runtime Environment JRE 6 Update 12, 11, and 10 allows user-assisted remote attackers to cause a trusted applet to run in an older JRE version, which can be used to exploit vulnerabilities in that older version, aka CR 6706490...

[SECURITY] Fedora 10 Update: knetworkmanager-0.7-0.8.20080926svn.fc10

KNetworkManager is a system tray applet for controlling network connections on systems that use the NetworkManager daemon...

Ubuntu: Security Advisory (USN-727-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu USN-727-1 (network-manager-applet)

The remote host is missing an update to network-manager-applet announced via advisory USN-727-1. OpenVAS Vulnerability Test $Id: ubuntu7271.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7271.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-727-1...

Ubuntu network-manager-applet错误权限限制漏洞

BUGTRAQ ID: 33966 CVECAN ID: CVE-2009-0365,CVE-2009-0578 dnetwork-manager-applet是Ubuntu系统中所使用的网络管理程序。 network-manager-applet在响应dbus请求时没有正确地强制权限，本地用户可以通过dbus请求查看其他用户的网络连接口令和预共享密钥。 network-manager-applet在响应dbus modify和delete请求时没有正确地强制权限，本地用户可以使用dbus请求修改或删除其他用户的网络连接。 Ubuntu Linux 8.10 Ubuntu Linux...

[USN-727-1] network-manager-applet vulnerabilities

=========================================================== Ubuntu Security Notice USN-727-1 March 03, 2009 network-manager-applet vulnerabilities CVE-2009-0365, CVE-2009-0578 =========================================================== A security issue affects the following Ubuntu releases: Ubunt...

USN-727-1: network-manager-applet vulnerabilities

It was discovered that network-manager-applet did not properly enforce permissions when responding to dbus requests. A local user could perform dbus queries to view other users' network connection passwords and pre-shared keys. CVE-2009-0365 It was discovered that network-manager-applet did not...

Fedora Update for xfce4-modemlights-plugin FEDORA-2007-4368

Check for the Version of xfce4-modemlights-plugin OpenVAS Vulnerability Test Fedora Update for xfce4-modemlights-plugin FEDORA-2007-4368 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribut...

Fedora Update for xfce4-modemlights-plugin FEDORA-2007-4385

Check for the Version of xfce4-modemlights-plugin OpenVAS Vulnerability Test Fedora Update for xfce4-modemlights-plugin FEDORA-2007-4385 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribut...

Mac OS X : Java for Mac OS X 10.5 Update 3

The remote Mac OS X 10.5 host is running a version of Java for Mac OS X that is missing Update 3. The remote version of this software contains several security vulnerabilities in Java Web Start and the Java Plug-in. For instance, they may allow untrusted Java Web Start applications and untrusted...

OpenJDK applet privilege escalation via JAX package access (6592792)

Multiple unspecified vulnerabilities in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier allow untrusted applets and applications to gain privileges via vectors related to access to inner classes in the 1 JAX-WS and 2 JAXB packages...

Java applets can be used to read sensitive information

Once a Java applet has been cached, if a page can predict the cache path for that applet, it can load the applet from the cache, causing it to run in the context of the local machine. This allows it to read other cache files on the computer or perform other normally more restrictive actions. Thes...

ZDI-08-081: Sun Java Web Start and Applet Multiple Sandbox Bypass Vulnerabilities

ZDI-08-081: Sun Java Web Start and Applet Multiple Sandbox Bypass Vulnerabilities http://www.zerodayinitiative.com/advisories/ZDI-08-081 December 4, 2008 -- Affected Vendors: Sun Microsystems -- Affected Products: Sun Microsystems Java Runtime -- TippingPointTM IPS Customer Protection: TippingPoi...

Design/Logic Flaw

Unspecified vulnerability in Java Web Start JWS and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier allows untrusted applets to read arbitrary files and make unauthorized network connections via unknown vectors...

CVE-2008-5344

Unspecified vulnerability in Java Web Start JWS and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier allows untrusted applets to read arbitrary files and make unauthorized network connections via unknown vectors...

OpenJDK applet privilege escalation via JAX package access (6592792)

Multiple unspecified vulnerabilities in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier allow untrusted applets and applications to gain privileges via vectors related to access to inner classes in the 1 JAX-WS and 2 JAXB packages...

Sun Java Web Start and Applet Multiple Sandbox Bypass Vulnerabilities

These vulnerabilities allow remote attackers to bypass sandbox restrictions on vulnerable installations of Sun Java Web Start. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The first vulnerability results in a cache location and a user...

Sun Java Runtime and Development Kit 6 Update 10 - Calendar Deserialization (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'rex' class Metasploit3 'Sun...

Java RE allows Same Origin Policy to be Bypassed (6687932)

Multiple unspecified vulnerabilities in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, SDK and JRE 1.4.x before 1.4.218, and SDK and JRE 1.3.x before 1.3.123 allow remote attackers to violate the security model for an applet's outbound...

Code injection

JSCAPE Secure FTP Applet 4.8.0 and earlier does not ask the user to verify a new or mismatched SSH host key, which makes it easier for remote attackers to perform man-in-the-middle attacks...