CVE-2003-1134

CVE-2003-1134 affects Sun Java 1.3.1, 1.4.1, and 1.4.2. The issue is a local denial-of-service (JVM crash) potentially triggered by calling the ClassDepth function with a null parameter, which leads to a crash rather than a null pointer exception. The available connected sources confirm the same ...

CVE-2004-1816

Unknown vulnerability in Sun Java System Application Server 7.0 Update 2 and earlier, when a SOAP web service expects an array of objects as an argument, allows remote attackers to cause a denial of service memory consumption...

CVE-2005-0742

Cross-site scripting XSS vulnerability in Sun Java System Application Server 7 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2005-1232

Buffer overflow in Sun Java System Web Proxy Server aka Sun ONE Proxy Server 3.6 SP6 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2005-1150

Unknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier, when running on Windows systems, allows attackers to cause a denial of service hang...

CVE-2005-1232

Buffer overflow in Sun Java System Web Proxy Server aka Sun ONE Proxy Server 3.6 SP6 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2005-1232

CVE-2005-1232 pertains to Sun Java System Web Proxy Server (also Sun ONE Proxy Server) 3.6 SP6. The vulnerability is described as a buffer overflow that could allow remote code execution via unknown vectors. The connected Nessus plugin cites an upgrade path to 3.6 SP7 or higher as a remediation. ...

Sun Java System Web Proxy Server Unspecified Remote Overflow

The remote host is running the SunOne Web Proxy. This version is reported vulnerable to a number of remote buffer overflows. Alledgedly, successful exploitation would result in the attacker executing arbitrary commands on the remote SunOne Web Proxy server. C Tenable Network Security, Inc. includ...

Sun Java System Web Proxy Server buffer overflow

No description provided...

[SA14901] Sun Java System Web Proxy Server Unspecified Buffer Overflow

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Sun Java System Web Proxy Server Unspecified Buffer...

CVE-2005-1150

Unknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier, when running on Windows systems, allows attackers to cause a denial of service hang...

CVE-2005-1150

The CVE-2005-1150 entry describes an unknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier when running on Windows, which can allow an attacker to cause a denial of service (hang). The available connected records corroborate the affected product and Windows-based DoS impact but ...

[SA14960] Sun Java System Directory Server LDAP Request Buffer Overflow

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Sun Java System Directory Server LDAP Request Buffer...

jdk -- jar directory traversal vulnerability

Pluf has discovered a vulnerability in Sun Java JDK/SDK, which potentially can be exploited by malicious people to compromise a user's system. The jar tool does not check properly if the files to be extracted have the string "../" on its names, so it's possible for an attacker to create a malicio...

[SA14902] Sun Java JDK/SDK Jar Directory Traversal Vulnerability

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Sun Java JDK/SDK Jar Directory Traversal Vulnerability...

GLSA-200503-28 : Sun Java: Web Start argument injection vulnerability

The remote host is affected by the vulnerability described in GLSA-200503-28 Sun Java: Web Start argument injection vulnerability Jouko Pynnonen discovered that Java Web Start contains a vulnerability in the way it handles property tags in JNLP files. Impact : By enticing a user to open a malicio...

Sun Java: Web Start argument injection vulnerability

Background Sun provides implementations of Java Development Kits JDK and Java Runtime Environments JRE. These implementations provide the Java Web Start technology that can be used for easy client-side deployment of Java applications. Description Jouko Pynnonen discovered that Java Web Start...

Sun Java System Application Server crossite scripting

No description provided...

[SA14677] Sun Java System Application Server Cross-Site Scripting

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Sun Java System Application Server Cross-Site Scriptin...

CVE-2005-0742

CVE-2005-0742 describes a cross-site scripting (XSS) vulnerability in Sun Java System Application Server 7. The issue allows remote attackers to inject arbitrary web script or HTML via unknown vectors, potentially affecting the integrity of user data. The cited NVD metrics indicate a low to mediu...