CVE-2007-6569

Cross-site scripting XSS vulnerability in the View Error Log functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566246...

Cross site scripting

Cross-site scripting XSS vulnerability in Sun Java System Web Proxy Server 3.6 before SP11 on Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6611356...

Cross site scripting

Cross-site scripting XSS vulnerability in the View URL Database functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 and 3.x before 3.6 SP11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566309...

CVE-2007-6572

Cross-site scripting XSS vulnerability in Sun Java System Web Server 6.1 before SP8 and 7.0 before Update 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566204...

CVE-2007-6570

Cross-site scripting XSS vulnerability in the View URL Database functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 and 3.x before 3.6 SP11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566309...

CVE-2007-6571

CVE-2007-6571 describes a cross-site scripting (XSS) vulnerability in Sun Java System Web Proxy Server 3.6 before SP11 on Windows, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected product/version: Sun Java System Web Proxy Server 3.6 prior to SP11...

CVE-2007-6571

Cross-site scripting XSS vulnerability in Sun Java System Web Proxy Server 3.6 before SP11 on Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6611356...

CVE-2007-6572

Cross-site scripting XSS vulnerability in Sun Java System Web Server 6.1 before SP8 and 7.0 before Update 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566204...

CVE-2007-6570

CVE-2007-6570 describes a Cross-site scripting (XSS) vulnerability in Sun Java System Web Proxy Server’s View URL Database functionality. Affected software versions are Sun Web Proxy Server 4.x before 4.0.6 and 3.x before 3.6 SP11. The vulnerability allows remote attackers to inject arbitrary web...

CVE-2007-6569

Cross-site scripting XSS vulnerability in the View Error Log functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566246...

CVE-2007-6569

Sun Java System Web Proxy Server 4.x (and Web Server) are vulnerable to cross-site scripting in the View Error Log/related log-viewing function (BugID 6566246). The JVN entry confirms the issue is a client-side script injection via unspecified vectors, affecting the Web Server and Web Proxy Serve...

CVE-2006-3109

Cross-site scripting XSS vulnerability in Cisco CallManager 3.3 before 3.35SR3, 4.1 before 4.13SR4, 4.2 before 4.23, and 4.3 before 4.31, allows remote attackers to inject arbitrary web script or HTML via the 1 pattern parameter in ccmadmin/phonelist.asp and 2 arbitrary parameters in...

EUVD-2006-3106

Cross-site scripting XSS vulnerability in Cisco CallManager 3.3 before 3.35SR3, 4.1 before 4.13SR4, 4.2 before 4.23, and 4.3 before 4.31, allows remote attackers to inject arbitrary web script or HTML via the 1 pattern parameter in ccmadmin/phonelist.asp and 2 arbitrary parameters in...

CVE-2006-3109

Cross-site scripting XSS vulnerability in Cisco CallManager 3.3 before 3.35SR3, 4.1 before 4.13SR4, 4.2 before 4.23, and 4.3 before 4.31, allows remote attackers to inject arbitrary web script or HTML via the 1 pattern parameter in ccmadmin/phonelist.asp and 2 arbitrary parameters in...

CVE-2003-1082

Buffer overflow in utmpupdate for Solaris 2.6 through 9 allows local users to gain root privileges, as identified by Sun BugID 4705891, a different vulnerability than CVE-2003-1068...

CVE-2003-1068

CVE-2003-1068 is a Solaris utmp_update buffer‑overflow vulnerability affecting Solaris 2.6–9 that can allow local users to gain root privileges. The connected OpenVAS entries reference the Solaris update 113650-02 for /usr/lib/utmp_update, indicating a patch is available. The CVE description note...

CVE-2003-1068

Buffer overflow in utmpupdate for Solaris 2.6 through 9 allows local users to gain root privileges, as identified by Sun BugID 4659277, a different vulnerability than CVE-2003-1082...

Solaris 8 pam_ldap.so.1 module broken

I looked through the archives back to November 2000 and didn't see this mentioned. Apologies if it's there and I missed it. Sunsolve has bugid 4384816 on file regarding this issue. It's been known since 06-Nov-2000 with a status of 'Evaluated' but no workaround or other information, helpful or...

Solaris 2.x7.08 - Catman Race Condition (1)

Solaris 2.x7.08 - Catman Race Condition 1 source: https://www.securityfocus.com/bid/2149/info catman is a utility for creating preformatted man pages, distributed as part of the Solaris Operating Environment. A problem exists which could allow local users to overwrite or corrupt files owned by...