CVE-2002-0866

CVE-2002-0866 affects Microsoft's Java VM JDBC classes, where JDBC functionality could be misused by a Java applet to load and execute a DLL via com.ms.jdbc.odbc.JdbcOdbc, with the DLL name terminated by a null string. The issue enables remote execution of DLLs from the client system, as describe...

CVE-2002-0866: Undefined Security Weakness

Java Database Connectivity JDBC classes in Microsoft Virtual Machine VM up to and including 5.0.3805 allow remote attackers to load and execute DLLs dynamic link libraries via a Java applet that calls the constructor for com.ms.jdbc.odbc.JdbcOdbc with the desired DLL terminated by a null string,...

CVE-2002-1260: Undefined Security Weakness

The Java Database Connectivity JDBC APIs in Microsoft Virtual Machine VM 5.0.3805 and earlier allow remote attackers to bypass security checks and access database contents via an untrusted Java applet...

BEA WebLogic Server stores database password in clear text in "config.xml"

Overview WebLogic Server contains a vulnerability that may expose the database username and password in clear text in the config.xml file. Description BEA Systems describes WebLogic Server as "an industrial-strength application infrastructure for developing, integrating, securing, and managing...

CVE-2004-1758

BEA WebLogic Server and WebLogic Express version 8.1 up to SP2, 7.0 up to SP4, and 6.1 up to SP6 may store the database username and password for an untargeted JDBC connection pool in plaintext in config.xml, which allows local users to gain privileges...

Sun J2EERI 1.4 Sun JDK 1.4.2 - JDBC Database Insecure Default Policy

Sun J2EERI 1.4 Sun JDK 1.4.2 - JDBC Database Insecure Default Policy source: https://www.securityfocus.com/bid/9444/info It has been reported that multiple JDBC database implementations include insecure default security policies. This could expose vulnerable databases to denial of service attacks...

j2ee.pointbase.txt

Hi, the following code crashes the Pointbase 4.6 database that comes with the J2EE reference implementation. It is provided as an ant script for flexibility and to illustrate the involved ressources. This is a cross-platform denial-of-service java exploit, caused by fact that the pointbase...

Sun J2EE/RI 1.4 / Sun JDK 1.4.2 - JDBC Database Insecure Default Policy

source: https://www.securityfocus.com/bid/9444/info It has been reported that multiple JDBC database implementations include insecure default security policies. This could expose vulnerable databases to denial of service attacks. This could also permit remote attackers to execute arbitrary comman...

Microsoft Java implementation JDBC classes do not properly validate DLL requests

Overview The Java Database Connectivity JDBC classes of Microsoft's Java virtual machine VM do not properly validate DLL requests, allowing a malicious applet to load and execute any DLL on the client system. Description Microsoft's Java VM is installed on Windows 98, NT, 2000, and XP. It is used...

Microsoft VM 20003000310031883200330038023805 series - JDBC Class Code Execution

Microsoft VM 20003000310031883200330038023805 series - JDBC Class Code Execution source: https://www.securityfocus.com/bid/5751/info Java Database Connectivity JDBC classes are used by the Virtual Machine to provide connectivity to various data sources. It is possible to spoof a JDBC class reques...

Microsoft VM 2000/3000/3100/3188/3200/3300/3802/3805 series - JDBC Class Code Execution

source: https://www.securityfocus.com/bid/5751/info Java Database Connectivity JDBC classes are used by the Virtual Machine to provide connectivity to various data sources. It is possible to spoof a JDBC class request to make it appear as though it came from an authorized applet. This could allow...