Solaris 2.6/2.6/7.0/8 whodo Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2935/info The 'whodo' utility shipped with Sun Microsystems' Solaris provides a listing of users online and their activities. It is installed setuid root because it reads from the 'utmp' log as well as from the process...

Solaris 2.6/7.0 lpset -r Buffer Overflow Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/1138/info A vulnerability exists in the handling of the -r option to the lpset program, as included in Solaris 7 from Sun Microsystems. The -r option is undocumented. As such, its use in unknown. However, when supplied a...

Sun AnswerBook2 1.x Unauthorized Administrative Script Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5383/info Sun Microsystems AnswerBook2 allows users to view Sun documentation through a web browser, and is available for Solaris. AnswerBook2 includes an administrative web interface. Reportedly, it is possible to access...

Sun Microsystems Java Virtual Machine 1.x Security Manager Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8892/info A problem has been reported in the Sun Microsystems Java Virtual Machine that occurs when implementing the Security Manager. Because of this, an attacker may be able to crash the virtual machine. /...

Sun StarOffice 5.1 Arbitrary File Read Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1040/info StarOffice is a desktop office suite offered by Sun Microsystems. StarScheduler is a groupware server that ships with StarOffice and includes a webserver that runs as root by default. When a request it sent to a...

Oracle JRE/JDK: Multiple vulnerabilities

Background The Oracle Java Development Kit JDK formerly known as Sun JDK and the Oracle Java Runtime Environment JRE formerly known as Sun JRE provide the Oracle Java platform formerly known as Sun Java Platform. Description Multiple vulnerabilities have been reported in the Oracle Java...

Sun Java GIF File Handling Memory Corruption - Improved Performance (CVE-2007-0243)

Java Technology is a programing platform developed by Sun Microsystems which aims to provide a system for developing and deploying cross-platform applications. Java is used in a wide variety programs that are deployed on personal computers as well as embedded devices and cell phones. Java is wide...

[SECURITY] Fedora 18 Update: zfs-fuse-0.7.0-10.fc18

ZFS is an advanced modern general-purpose filesystem from Sun Microsystems, originally designed for Solaris/OpenSolaris. This project is a port of ZFS to the FUSE framework for the Linux operating system...

Scientific Linux Security Update : java (jdk 1.6.0) on SL4.x, SL5.x i386/x86_64

This update fixes several vulnerabilities in the Sun Java 6 Runtime Environment and the Sun Java 6 Software Development Kit. These vulnerabilities are summarized on the 'Advance notification of Security Updates for Java SE' page from Sun Microsystems, listed in the References section. All running...

Sun Microsystems Cross Site Scripting

Title: ====== Sun Microsystems Print - Cross Site Scripting Vulnerability Date: ===== 2012-02-01 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=404 VL-ID: ===== 404 Introduction: ============= Sun Microsystems, Inc. was a company that sold computers, computer component...

Sun Microsystems (Print) - Cross Site Scripting Vulnerabilities

Sun Microsystems Print - Cross Site Scripting Vulnerabilities Today Ucha Gobejishvili longrifle0x a Pentester from Georgia reported 3 More important Cross Site Scripting Vulnerabilities in Sun Microsystem's and Java Printer Webpages. Java's Vulnerable Link : Click Here Sun's Vulnerable Link 1 :...

Sun Microsystems (Print) - Cross Site Scripting Vulnerability

Document Title: =============== Sun Microsystems Print - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=404 Release Date: ============= 2012-01-31 Vulnerability Laboratory ID VL-ID: ====================================...

Sun Microsystems (Print) - Cross Site Scripting Vulnerability

Document Title: =============== Sun Microsystems Print - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=404 Release Date: ============= 2012-01-31 Vulnerability Laboratory ID VL-ID: ====================================...

MySql.com Site Hacked, Was Serving Malware

The main Web site of MySql.com has been compromised and on Monday afternoon was serving malware to visitors for a short time through the use of JavaScript redirects. The site, which is owned by Oracle, was sending victims off to a remote site that is using the BlackHole exploit kit to install...

Solaris 8 (x86) : 110663-26

SunOS 5.8x86: ksh patch. Date this patch was last updated by Sun : Apr/06/11 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Oracle Solaris 10回滚补丁文件密码哈希泄露漏洞

CVE ID: CVE-2011-0412 Solaris是Sun Microsystems研发的计算机操作系统。 Oracle Solaris 10回滚补丁文件undo.Z包含未授权用户可读的密码哈希，本地用户可通过此漏洞泄露敏感信息。 此安全漏洞源于某些软件包的/var/sadm/pkg/pkgname/save/patchid/以不安全方式存储了"undo.Z"回滚文件，可导致提取包含root和其他用户的密码哈希的文件。 Sun Solaris 10.0 厂商补丁： Sun --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Sun.com (Oracle Sun Microsystems) vulnerable to SQL Injection

Sun.com Oracle Sun Microsystems vulnerable to SQL Injection Sun Microsystems, Inc. was a company selling computers, computer components, computer software, and information technology services. Sun was founded on February 24, 1982. Prior to the acquistition by Oracle its headquarters were in Santa...

Multiple Vendors Calendar Manager RPC Service Memory Corruption (CVE-2010-4435)

A memory corruption vulnerability has been reported in IBM's, Hewlett-Packard's and Sun Microsystems calendar manager product. The vulnerability is due to an error in the Calendar Manager Service Daemon rpc.cmsd when handling RPC requests...

ZDI-11-062: Multiple Vendor Calendar Manager RPC Service Remote Code Execution Vulnerability

ZDI-11-062: Multiple Vendor Calendar Manager RPC Service Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-062 February 8, 2011 -- CVE ID: CVE-2010-4435 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Hewlett-Packard IBM Sun Microsystems -- Affect...

CVE-2011-0902

Multiple untrusted search path vulnerabilities in the Java Service in Sun Microsystems SunScreen Firewall on SunOS 5.9 allow local users to execute arbitrary code via a modified 1 PATH or 2 LDLIBRARYPATH environment variable...