Sun Java System Web Server Admin Interface DoS Vulnerability

Sun Java System Web Server is prone to a denial of service DoS vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program i...

CVE-2010-0897

Unspecified vulnerability in the Sun Java System Directory Server component in Oracle Sun Product Suite 5.2, 6.0, 6.1, 6.2, 6.3, and 6.3.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Directory Service Markup Language...

Design/Logic Flaw

Unspecified vulnerability in the Sun Java System Access Manager component in Oracle Sun Product Suite 7.1, 7 2005Q4, and OpenSSO Enterprise 8.0 allows remote attackers to affect confidentiality and integrity via unknown vectors...

CVE-2010-0885

Unspecified vulnerability in the Sun Java System Communications Express component in Oracle Sun Product Suite 6 2005Q4 6.2 and and 6.3 allows remote authenticated users to affect confidentiality via unknown vectors related to Address Book...

CVE-2010-0897

CVE-2010-0897 affects Sun Microsystems Directory Server (Oracle Sun Product Suite). Connected sources describe multiple vulnerabilities in the DSML/DSML-over-HTTP and LDAP implementations. The flaws can enable denial of service via DSML-over-HTTP POST requests or malformed LDAP queries, and can a...

CVE-2010-0897

Unspecified vulnerability in the Sun Java System Directory Server component in Oracle Sun Product Suite 5.2, 6.0, 6.1, 6.2, 6.3, and 6.3.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Directory Service Markup Language...

CVE-2010-0894: Undefined Security Weakness

Unspecified vulnerability in the Sun Java System Access Manager component in Oracle Sun Product Suite 7.1, 7 2005Q4, and OpenSSO Enterprise 8.0 allows remote attackers to affect confidentiality and integrity via unknown vectors...

CVE-2010-0885: Undefined Security Weakness

Unspecified vulnerability in the Sun Java System Communications Express component in Oracle Sun Product Suite 6 2005Q4 6.2 and and 6.3 allows remote authenticated users to affect confidentiality via unknown vectors related to Address Book...

CVE-2010-0897: Undefined Security Weakness

Unspecified vulnerability in the Sun Java System Directory Server component in Oracle Sun Product Suite 5.2, 6.0, 6.1, 6.2, 6.3, and 6.3.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Directory Service Markup Language...

Sun Java System Web Server <= 7.0 Update 7 Multiple Vulnerabilities

Sun Java Web Server is prone to multiple vulnerabilities. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

Sun Java System Web Server WebDAV请求远程文件泄露漏洞

BUGTRAQ ID: 39187 Sun Java System Web Server是高性能的WEB服务器。 Sun Java System Web Server的WebDAV实现在处理LOCK请求时存在错误，远程攻击者可以通过向服务器发送定义外部XML实体的特制LOCK命令导致泄漏任意本地文件的内容。成功攻击要求用户拥有WebDAV写访问权限。 Sun Java System Web Server 7.0 Update 4 厂商补丁： Sun --- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Sun Java System Web Server Remote Code Execution

!/usr/bin/perl aN0THER TiP OF THE iCE-B3RG ReMOTE eXPLoiT //Sun Microsystems Sun Java System Web Server //Broken One Target Remote Exploit for Sparc //by Kingcope and lsd //Bug Found by immunity/gleg CVE-2010-0361 May/2010 WORKS ONLY ON ADD YOUR TARGETS AS YOU WiSH KTHX SunOS unknown 5.10...

Sun Java System Web Server File Disclosure

sun-knockout.pl EXPLOiT CORRECTED, ADD AUTHEN+SSL SuPP0RT iF YOURE kRAD KTHX !/usr/bin/perl aNOTH3R TiP OF THE iCE-BERG ReMOTE eXPLoiT oO SUN MiCROSYSTEMZ - SUN JAVA SYSTEM WEB SERVER Oo oO REMOTE FiLE DiSCLOSURE EXPLOIT Oo oO BUG FOUND & EXPLOiTED BY KiNGCOPE // ISOWAREZ.DE Oo !! THIS EXPLOIT IS...

CVE-2010-1227

Cross-site scripting XSS vulnerability in Sun Java System Communications Express 6.2 and 6.3 allows remote attackers to inject arbitrary web script or HTML via the subject field of a message, as demonstrated by a subject containing an IMG element with a SRC attribute that performs a cross-site...

CVE-2010-1227

Cross-site scripting XSS vulnerability in Sun Java System Communications Express 6.2 and 6.3 allows remote attackers to inject arbitrary web script or HTML via the subject field of a message, as demonstrated by a subject containing an IMG element with a SRC attribute that performs a cross-site...

CVE-2010-1227

CVE-2010-1227 describes a cross-site scripting (XSS) vulnerability in Sun Java System Communications Express 6.2 and 6.3 that allows remote attackers to inject arbitrary Web script or HTML via the subject field of a message, demonstrated by a subject containing an IMG element whose SRC attribute ...

CVE-2010-1227: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Sun Java System Communications Express 6.2 and 6.3 allows remote attackers to inject arbitrary web script or HTML via the subject field of a message, as demonstrated by a subject containing an IMG element with a SRC attribute that performs a cross-site...

Sun Java System Communications Express Multiple HTML Injection Vuln

Exploit for unknown platform in category web applications ============================================================================== Sun Java System Communications Express Multiple HTML Injection Vulnerabilities ============================================================================== As...

Sun Java System Directory Server LDAP Search Request DoS Vulnerability (Jan 2010)

Sun Java System Directory Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Update Protection against Sun Java System Web Server Digest Authorization Buffer Overflow

A buffer overflow vulnerability was reported in Sun Java System Web Server, a web server for medium to large business applications. The vulnerability is due to insufficient boundary checks when processing malformed HTTP requests. A remote unauthenticated attack can leverage this vulnerability by...