KLA10346 ACE vulnerability in Java System Web Proxy Server

A buffer overflow was found in the Java System Web Proxy Server. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely a via specially designed GET request. Original advisories - Exploitation Related products...

Sun Java System Portal Server Portlets跨站脚本漏洞

BUGTRAQ ID: 30738 CNCAN ID：CNCAN-2008081909 Sun Java System Portal Server是一款与J2EE平台兼容的应用服务器。 Sun Java System Portal Server绑定的部分Portlets存在跨站脚本问题，远程攻击者可以利用漏洞在用户WEB浏览器上执行任意脚本代码。 目前没有详细漏洞细节提供。 Sun Java System Portal Server 7.1 Sun Java System Portal Server 7.0 Sun Java System Portal Server 7 可参考如下补丁：...

Design/Logic Flaw

Unspecified vulnerability in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.5 before SP6 allows remote attackers to cause a denial of service failure to accept connections via unknown vectors, probably related to exhaustion of file descriptors...

CVE-2008-3683

The CVE-2008-3683 affects Sun Java System Web Proxy Server 4.0–4.0.5 prior to SP6, where an unspecified vulnerability in the FTP subsystem can allow remote attackers to trigger a denial of service by exhausting file descriptors (failure to accept new connections). The issue is described as unknow...

CVE-2008-3683

Unspecified vulnerability in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.5 before SP6 allows remote attackers to cause a denial of service failure to accept connections via unknown vectors, probably related to exhaustion of file descriptors...

CVE-2008-3683: Undefined Security Weakness

Unspecified vulnerability in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.5 before SP6 allows remote attackers to cause a denial of service failure to accept connections via unknown vectors, probably related to exhaustion of file descriptors...

Sun Java System Web Proxy Server FTP子系统拒绝服务漏洞

BUGTRAQ ID: 30671 CNCAN ID：CNCAN-2008081410 Sun Java System Web Proxy Server是一款基于JAVA的WEB代理服务程序。 Sun Java System Web Proxy Server 4.0的FTP子系统存在安全问题，本地或远程攻击者可以阻止代理服务器接收新的连接，导致拒绝服务攻击。 目前没有详细漏洞细节提供。 Sun Java System Web Proxy Server 4.0.5 Sun Java System Web Proxy Server 4.0 可参考如下安全公告获得补丁信息：...

Solaris 10 (sparc) : 119725-06 (deprecated)

Sun JavaTM System LDAP Java Development Kit 4.21: patch for Sola. Date this patch was last updated by Sun : Sep/19/08 This plugin has been deprecated and either replaced with individual 119725 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security,...

Code injection

Unspecified vulnerability in the Sun Java System Web Server 7.0 plugin in Sun N1 Service Provisioning System SPS 5.2 and 6.0 allows remote authenticated SPS users to gain administrative access to the web server via unknown attack vectors...

CVE-2008-3425

Unspecified vulnerability in the Sun Java System Web Server 7.0 plugin in Sun N1 Service Provisioning System SPS 5.2 and 6.0 allows remote authenticated SPS users to gain administrative access to the web server via unknown attack vectors...

CVE-2008-3425

The vulnerability described in CVE-2008-3425 affects the Sun Java System Web Server 7.0 plugin within Sun N1 Service Provisioning System (SPS) versions 5.2 and 6.0. The issue allows remote authenticated SPS users to gain administrative access to the web server via unspecified attack vectors. The ...

CVE-2008-3425: Improper Authentication

Unspecified vulnerability in the Sun Java System Web Server 7.0 plugin in Sun N1 Service Provisioning System SPS 5.2 and 6.0 allows remote authenticated SPS users to gain administrative access to the web server via unknown attack vectors...

Sun Java System ASP Server Detection

The remote service is an ASP Server, part of Sun Java System Active Server Pages or an older variant such as Chili!Soft ASP, which provides a web server with ASP Active Server Pages functionality. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Sun Java System ASP Server < 4.0.3 Multiple Vulnerabilities

The remote host is running Sun Java System Active Server Pages ASP, or an older variant such as Sun ONE ASP or Chili!Soft ASP. The web server component of the installed version of Active Server Pages on the remote host is affected by several vulnerabilities : - Several of the administration...

Sun Java System Access Manager XSLT样式表单XML签名远程代码执行漏洞

BUGTRAQ ID: 29988 CNCAN ID：CNCAN-2008063001 Sun Java System Access Manager是一款安全单点登录、认证、授权解决方案。 Sun Java系统访问管理器没有正确安全处理XML签名中的XSLT样式表单，远程攻击者可以利用漏洞以应用程序权限执行任意代码。 能建立使用访问管理器本地可查看的XML签名的远程用户可以访问管理器应用程序权限执行任意代码。访问管理器由WEB'容器'应用程序运行，如Sun Java System Application...

CVE-2008-2945

Sun Java System Access Manager 6.3 through 7.1 and Sun Java System Identity Server 6.1 and 6.2 do not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute arbitrary code via a crafted stylesheet, a related issue to...

CVE-2008-2945

Technical details for CVE-2008-2945 are not provided in the connected documents; public disclosures and remediation are not covered here. Monitor for updates.

CVE-2008-2945: Improper Input Validation

Sun Java System Access Manager 6.3 through 7.1 and Sun Java System Identity Server 6.1 and 6.2 do not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute arbitrary code via a crafted stylesheet, a related issue to...

Sun Java System Calendar服务器拒绝服务漏洞

BUGTRAQ ID: 29763 CNCAN ID：CNCAN-2008061906 Sun Java System Calendar Server是一款基于Java的日程服务程序。 Sun Java System Calendar Server在访问日志开启时存在未明安全问题，远程攻击者可以利用漏洞对服务程序进行拒绝服务攻击。 目前没有详细漏洞细节提供。 Sun ONE Calendar Server 6.0 Sun Java System Calendar Server 6.3 Sun Java System Calendar Server 6 2005Q4 Sun Java...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Glassfish webadmin interface in Sun Java System Application Server 9.101 allow remote attackers to inject arbitrary web script or HTML via the 1 propertyForm:propertyContentPage:propertySheet:propertSectionTextField:jndiProp:JndiNew, 2...