[SA23445] Sun Java JRE Multiple Vulnerabilities

TITLE: Sun Java JRE Multiple Vulnerabilities SECUNIA ADVISORY ID: SA23445 VERIFY ADVISORY: http://secunia.com/advisories/23445/ CRITICAL: Highly critical IMPACT: Privilege escalation, System access WHERE: From remote SOFTWARE: Sun Java JDK 1.5.x http://secunia.com/product/4621/ Sun Java JRE 1.5.x...

[SA23398] Sun Java JRE Applet Security Bypass

TITLE: Sun Java JRE Applet Security Bypass SECUNIA ADVISORY ID: SA23398 VERIFY ADVISORY: http://secunia.com/advisories/23398/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: Sun Java JDK 1.5.x http://secunia.com/product/4621/ Sun Java JRE 1.5.x / 5.x...

Sun Java系统服务器嵌入式HTTP请求处理漏洞

Sun Java系统应用和WEB服务器都是与J2EE平台兼容的应用服务器。 Sun Java System Application Server在处理HTTP请求时存在漏洞，远程攻击者可能利用此漏洞执行各种攻击。 如果Sun Java System Application Server或Sun Java System Web Server使用Sun Java System Proxy Server的话，由于未能正确地实现HTTP/1.1...

CVE-2006-6276

HTTP request smuggling vulnerability in Sun Java System Proxy Server before 20061130, when used with Sun Java System Application Server or Sun Java System Web Server, allows remote attackers to bypass HTTP request filtering, hijack web sessions, perform cross-site scripting XSS, and poison web...

CVE-2006-6276

Sun Java System Proxy Server versions prior to 20061130 are affected by an HTTP request smuggling vulnerability when used with Sun Java System Application Server or Sun Java System Web Server. Exploitation could bypass HTTP request filtering, enable web session hijacking, permit cross-site script...

CVE-2006-6276

HTTP request smuggling vulnerability in Sun Java System Proxy Server before 20061130, when used with Sun Java System Application Server or Sun Java System Web Server, allows remote attackers to bypass HTTP request filtering, hijack web sessions, perform cross-site scripting XSS, and poison web...

CVE-2006-6276: Inconsistent Interpretation of HTTP Requests

HTTP request smuggling vulnerability in Sun Java System Proxy Server before 20061130, when used with Sun Java System Application Server or Sun Java System Web Server, allows remote attackers to bypass HTTP request filtering, hijack web sessions, perform cross-site scripting XSS, and poison web...

[SA22910] Sun Java JRE Swing Library Applet Security Bypass

TITLE: Sun Java JRE Swing Library Applet Security Bypass SECUNIA ADVISORY ID: SA22910 VERIFY ADVISORY: http://secunia.com/advisories/22910/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: Sun Java JRE 1.5.x / 5.x http://secunia.com/product/4228/ Sun Java JDK 1.5...

Sun Java运行时环境信息泄露漏洞

Sun的Java运行时环境（JRE）为JAVA应用程序提供可靠的运行环境。 Sun Java运行时环境Swing库中存在安全漏洞，可能允许不可信任的Applet访问其他Applet中的数据。 Sun J2SE = 5.0 Update 7 Sun --- Sun已经为此发布了一个安全公告（Sun-Alert-102622）以及相应补丁: Sun-Alert-102622：A Security Vulnerability in the Java Runtime Environment Swing Library may Allow an Untrusted Applet to Access...

Sun Java System Content Delivery Server信息泄露漏洞

Sun Java System Content Delivery Server可为移动用户提供可以下载的数据服务。 Sun Java System Content Delivery Server的实现上存在漏洞，本地或远程非特权用户可能利用此漏洞读取系统上任意文件的数据。 Sun Java System Content Delivery Server 5.0 Sun Java System Content Delivery Server 4.1 Sun Java System Content Delivery Server 4.0...

Solaris 5.9 (x86) : 120091-15

AM 6.2x86: Sun Java System Access Manager. Date this patch was last updated by Sun : Feb/05/08 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security if !...

Solaris 9 (x86) : 119467-17

IS 6.3x86: Sun JavaTM System Access Manager 6 2005Q1. Date this patch was last updated by Sun : Jun/29/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 9 (sparc) : 115610-25

Sun JavaTM System Administration Server 5.2 patch 6: Solaris spa. Date this patch was last updated by Sun : Sep/21/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 9 (sparc) : 115732-10

Sun Java System Instant Messaging SunOS 5.8 5.9. Date this patch was last updated by Sun : May/25/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; i...

Solaris 9 (x86) : 119465-17

Sun JavaTM System Access Manager 6 2005Q1. Date this patch was last updated by Sun : Jun/29/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 8 (sparc) : 119166-43

Sun Java System App Server Enterprise Ed 8.1 2005Q1, Solaris Patch. Date this patch was last updated by Sun : Oct/18/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 9 (sparc) : 118540-42

Sun Java System Communications Express 6.2. Date this patch was last updated by Sun : Jan/16/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 10 (x86) : 115615-28 (deprecated)

Sun JavaTM System Directory Server 5.2 patch 6 : Solarisx86. Date this patch was last updated by Sun : Sep/21/07 This plugin has been deprecated and either replaced with individual 115615 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Solaris 10 (x86) : 119167-43 (deprecated)

Sun Java System App Server Enterprise Ed 8.1 2005Q1, x86 Patch32. Date this patch was last updated by Sun : Oct/18/11 This plugin has been deprecated and either replaced with individual 119167 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security,...

Solaris 8 (sparc) : 115766-15

AM 6.2: Sun Java System Access Manager. Date this patch was last updated by Sun : Feb/05/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...