Sun Java System Access Manager 7.1 - 'Username' Enumeration

source: https://www.securityfocus.com/bid/33489/info Sun Java System Access Manager is prone to a username-enumeration weakness because of a design error in the application when verifying user-supplied input. Attackers may exploit this weakness to discern valid usernames. This may aid them in...

SuSE Update for Sun Java SUSE-SA:2008:018

Check for the Version of Sun Java OpenVAS Vulnerability Test $Id: gbsuse2008018.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for Sun Java SUSE-SA:2008:018 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

SuSE Update for Sun Java security update SUSE-SA:2008:042

Check for the Version of Sun Java security update OpenVAS Vulnerability Test $Id: gbsuse2008042.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for Sun Java security update SUSE-SA:2008:042 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

CVE-2009-0169

Sun Java System Access Manager 7.1 allows remote authenticated sub-realm administrators to gain privileges, as demonstrated by creating the amadmin account in the sub-realm, and then logging in as amadmin in the root realm...

CVE-2009-0169

Sun Java System Access Manager 7.1 allows remote authenticated sub-realm administrators to gain privileges, as demonstrated by creating the amadmin account in the sub-realm, and then logging in as amadmin in the root realm...

CVE-2009-0169

CVE-2009-0169 affects Sun Java System Access Manager 7.1. The vulnerability allows a remote authenticated sub-realm administrator to escalate privileges by creating the amadmin account in the sub-realm and then logging in as amadmin in the root realm. The available data confirms an in-realm privi...

CVE-2009-0170

Technical details about CVE-2009-0170 are not publicly available in the provided connected documents. Monitor for updates from vendors and advisories to determine affected products, impact, and fixes.

CVE-2009-0169

Sun Java System Access Manager 7.1 allows remote authenticated sub-realm administrators to gain privileges, as demonstrated by creating the amadmin account in the sub-realm, and then logging in as amadmin in the root realm...

CVE-2009-0169: Undefined Security Weakness

Sun Java System Access Manager 7.1 allows remote authenticated sub-realm administrators to gain privileges, as demonstrated by creating the amadmin account in the sub-realm, and then logging in as amadmin in the root realm...

CVE-2009-0170: Undefined Security Weakness

Sun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1 allows remote authenticated users with console privileges to discover passwords, and obtain unspecified other "access to resources," by visiting the Configuration Items component in the console...

Sun Java System Access Manager 'sub-realm'特权提升漏洞

BUGTRAQ ID: 33266 CNCAN ID：CNCAN-2009011503 Sun Java System Access Manager是一款安全单点登录、认证、授权解决方案。 Sun Java System Access Manager存在安全漏洞，允许sub-real管理员提升特权或访问root realm作为管理员。 目前没有详细漏洞细节提供。 Sun Java System Access Manager 7.1 Windows Sun Java System Access Manager 7.1 Solaris x86 Sun Java System Access...

Java WebStart privilege escalation

Unspecified vulnerability in Java Web Start JWS and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier allows untrusted JWS applications to gain privileges to access local files or applications via unknown vectors,...

JRE allows unauthorized file access and connections to localhost

Unspecified vulnerability in Java Runtime Environment JRE with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.218 and earlier; and SDK and JRE 1.3.123 and earlier allows code that is loaded from a local filesystem to read arbitrary files and make...

SuSE Security Advisory SUSE-SA:2009:001 (Sun Java)

The remote host is missing updates announced in advisory SUSE-SA:2009:001. OpenVAS Vulnerability Test $Id: susesa2009001.nasl 6668 2017-07-11 13:34:29Z cfischer $ Description: Auto-generated from advisory SUSE-SA:2009:001 Sun Java Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

SUSE: Security Advisory for Sun Java (SUSE-SA:2009:001)

The remote host is missing updates announced in advisory SUSE-SA:2009:001. Copyright C 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

openSUSE 10 Security Update : java-1_5_0-sun (java-1_5_0-sun-5875)

The version update to SUN Java 1.5.0u17 fixes numerous security issues such as privilege escalations. CVE-2008-5360, CVE-2008-5359, CVE-2008-5358, CVE-2008-5357, CVE-2008-5356, CVE-2008-5344, CVE-2008-5343, CVE-2008-5342, CVE-2008-5341, CVE-2008-5340, CVE-2008-5339, CVE-2008-2086, CVE-2008-5355,...

openSUSE 10 Security Update : java-1_6_0-sun (java-1_6_0-sun-5876)

The version update to SUN Java 1.6.011-b03 fixes numerous security issues such as privilege escalations. CVE-2008-5360, CVE-2008-5359, CVE-2008-5358, CVE-2008-5357, CVE-2008-5356, CVE-2008-5344, CVE-2008-5343, CVE-2008-5342, CVE-2008-5341, CVE-2008-5340, CVE-2008-5339, CVE-2008-2086, CVE-2008-535...

CVE-2008-5662

Multiple buffer overflows in Sun Java Wireless Toolkit WTK for CLDC 2.5.2 and earlier allow downloaded programs to execute arbitrary code via unknown vectors...

Buffer overflow

Multiple buffer overflows in Sun Java Wireless Toolkit WTK for CLDC 2.5.2 and earlier allow downloaded programs to execute arbitrary code via unknown vectors...

CVE-2008-5662

CVE-2008-5662 relates to multiple buffer overflows in Sun Java Wireless Toolkit (WTK) for CLDC 2.5.2 and earlier. Root cause: multiple buffer overflow conditions that allow downloaded programs to execute arbitrary code. Affected product/version: Sun Java Wireless Toolkit with CLDC 2.5.2 and earli...