157 matches found
OpenJDK Proxy mechanism information leaks (6801071)
The SOCKS proxy implementation in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to discover the username of the account that invoked an untrusted 1 applet or 2 Java Web Start application via unspecified vectors...
OpenJDK Proxy mechanism information leaks (6801071)
The SOCKS proxy implementation in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to discover the username of the account that invoked an untrusted 1 applet or 2 Java Web Start application via unspecified vectors...
OpenJDK Proxy mechanism information leaks (6801071)
The SOCKS proxy implementation in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to discover the username of the account that invoked an untrusted 1 applet or 2 Java Web Start application via unspecified vectors...
CVE-2009-2671
The SOCKS proxy implementation in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to discover the username of the account that invoked an untrusted 1 applet or 2 Java Web Start application via unspecified vectors...
CVE-2009-2671
CVE-2009-2671 affects Sun JRE/JDK: SOCKS proxy implementation in Sun Java Runtime Environment (JRE) and JDK allowed information leakage of the invoking user name via untrusted applets/Web Start. Affected products: JDK/JRE 6 pre-Update 15 and 5.0 pre-Update 20. Root cause: proxy mechanism informat...
CVE-2009-2671
The SOCKS proxy implementation in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to discover the username of the account that invoked an untrusted 1 applet or 2 Java Web Start application via unspecified vectors...
Sun Java JRE Multiple Vulnerabilities (263408 / 263409 / 263428 ..)
The version of Sun Java Runtime Environment JRE installed on the remote host is earlier than 6 Update 15 / 5.0 Update 20 / 1.4.222 / 1.3.126. Such version are potentially affected by the following security issues : - A vulnerability in the JRE audio system may allow system properties to be...
Mozilla data corruption with SOCKS5 reply
Mozilla Firefox before 3.0.12, and 3.5.x before 3.5.2, allows remote SOCKS5 proxy servers to cause a denial of service data stream corruption via a long domain name in a reply...
socks-open-proxy NSE Script
Checks if an open socks proxy is running on the target. The script attempts to connect to a proxy server and send socks4 and socks5 payloads. It is considered an open proxy if the script receives a Request Granted response from the target port. The payloads try to open a connection to...
SOCKS Proxy UNC Path Redirection
This module provides a Socks proxy service that redirects all HTTP requests to a web page that loads a UNC path. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SOCKS Proxy UNC Path Redirection...
Stack overflow
Multiple stack-based buffer overflows in the SOCKS proxy support sockd in Sun Java Web Proxy Server before 4.0.5 allow remote attackers to execute arbitrary code via crafted packets during protocol negotiation...
CVE-2007-2881
Multiple stack-based buffer overflows in the SOCKS proxy support sockd in Sun Java Web Proxy Server before 4.0.5 allow remote attackers to execute arbitrary code via crafted packets during protocol negotiation...
CVE-2007-2881
Multiple stack-based buffer overflows in the SOCKS proxy support sockd in Sun Java Web Proxy Server before 4.0.5 allow remote attackers to execute arbitrary code via crafted packets during protocol negotiation...
CVE-2007-2881
Sun Java System Web Proxy Server (sockd) is affected by a buffer overflow in the SOCKS proxy support during protocol negotiation. The issue resides in the sockd daemon and can allow a remote attacker to execute arbitrary code with the privileges of the SOCKS server; impact is described as remote ...
iDefense Security Advisory 05.25.07: Sun Java System Web Proxy Multiple Buffer Overflow Vulnerabilities
Sun Java System Web Proxy Multiple Buffer Overflow Vulnerabilities iDefense Security Advisory 05.25.07 http://labs.idefense.com/intelligence/vulnerabilities/ May 25, 2007 I. BACKGROUND Sun Microsystems Inc's Java System is a collection of server applications bundled together. One such server...