Design/Logic Flaw

Cross-site scripting XSS vulnerability in Sun Java System Communications Express 6.2 and 6.3 allows remote attackers to inject arbitrary web script or HTML via the subject field of a message, as demonstrated by a subject containing an IMG element with a SRC attribute that performs a cross-site...

CVE-2010-1227

Cross-site scripting XSS vulnerability in Sun Java System Communications Express 6.2 and 6.3 allows remote attackers to inject arbitrary web script or HTML via the subject field of a message, as demonstrated by a subject containing an IMG element with a SRC attribute that performs a cross-site...

CVE-2010-1227

CVE-2010-1227 describes a cross-site scripting (XSS) vulnerability in Sun Java System Communications Express 6.2 and 6.3 that allows remote attackers to inject arbitrary Web script or HTML via the subject field of a message, demonstrated by a subject containing an IMG element whose SRC attribute ...

Immunity Canvas: JAVA_METHOD_CHAIN

Name| javamethodchain ---|--- CVE| CVE-2010-0840 Exploit Pack| CANVAS Description| javamethodchain Notes| CVE Name: CVE-2010-0840 VENDOR: Sun Repeatability: Infinite client side - no crash References:...

Immunity Canvas: JAVA_DESERIALIZE2

Name| javadeserialize2 ---|--- CVE| CVE-2010-0094 Exploit Pack| CANVAS Description| javadeserialize2 Notes| CVE Name: CVE-2010-0094 VENDOR: Sun OSVDB: http://osvdb.org/show/osvdb/63484 Repeatability: Infinite client side - no crash References:...

Critical: Red Hat Security Advisory: java-1.6.0-sun security update

Updated java-1.6.0-sun packages that correct several security issues are now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, whic...

Solaris Update for Sun XVR-300 Graphics Accelerator 124149-16

Check for the Version of Sun XVR-300 Graphics Accelerator OpenVAS Vulnerability Test Solaris Update for Sun XVR-300 Graphics Accelerator 124149-16 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Secunia Research: Sun Java JDK/JRE Soundbank Resource Name Buffer Overflow

====================================================================== Secunia Research 31/03/2010 - Sun Java JDK/JRE Soundbank Resource Name Buffer Overflow - ====================================================================== Table of Contents Affected...

Solaris Update for emlxs 141876-06

Check for the Version of emlxs OpenVAS Vulnerability Test Solaris Update for emlxs 141876-06 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the...

Secunia Research: Sun Java JDK/JRE Soundbank Resource Parsing Buffer Overflow

====================================================================== Secunia Research 31/03/2010 - Sun Java JDK/JRE Soundbank Resource Parsing Buffer Overflow - ====================================================================== Table of Contents Affected...

Solaris Update for Sun XVR-300 Graphics Accelerator 124149-16

Check for the Version of Sun XVR-300 Graphics Accelerator OpenVAS Vulnerability Test Solaris Update for Sun XVR-300 Graphics Accelerator 124149-16 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Oracle Java SE and Java for Business 'MixerSequencer' Remote Code Execution Vulnerability

Description Oracle Java SE and Java for Business are prone to a remote code-execution vulnerability affecting the 'Sound' component. Successful exploits may allow an attacker to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will result...

Oracle Java SE and Java for Business CVE-2010-0094 Remote Java Runtime Environment Vulnerability

Description Oracle Java SE and Java for Business are prone to a remote vulnerability in Java Runtime Environment. The vulnerability can be exploited over multiple protocols. An attacker does not require privileges to exploit this vulnerability. This vulnerability affects the following supported...

Oracle Java Runtime Environment 'HsbParser.getSoundBank()' Remote Heap Buffer Overflow Vulnerability

Description Oracle Java SE and Java for Business are prone to a remote heap-based buffer-overflow vulnerability affecting the Java Runtime Environment JRE. Attackers can exploit this issue to execute arbitrary code within the context of the user invoking the JRE. Versions prior to Java 5.0 Update...

Sun Solaris symbolic links vulnerability

Multiple symbolic links vulnerabilities on updates installation...

Symlink attack with Solaris Update manager and Sun Patch Cluster

Symlink attack with Solaris Update manager and Sun Patch Cluster Larry W. Cashdollar Vapid Labs http://vapid.dhs.org 1/24/2010 With the GUI Sun Update Manager being used to install patches on a system local users can easily run scripts and create symlinks in an attempt to clobber files and...

Solaris Update manager and Sun Patch Cluster symlink vulnerability

Exploit for solaris platform in category local exploits ================================================================== Solaris Update manager and Sun Patch Cluster symlink vulnerability ================================================================== Symlink attack with Solaris Update manag...

Solaris Update Manager / Sun Patch Cluster Symlink Attack

Symlink attack with Solaris Update manager and Sun Patch Cluster Larry W. Cashdollar Vapid Labs http://vapid.dhs.org 1/24/2010 With the GUI Sun Update Manager being used to install patches on a system local users can easily run scripts and create symlinks in an attempt to clobber files and...

Sun JDK Hard Coded Image in Java File (CVE-2007-2788)

Java Technology is a programming platform developed by Sun Microsystems which aims to provide a system for developing and deploying cross-platform applications. Java is widely used for web applications in numerous forms, one of which are Java Applets. The Java Development Kit JDK is a Sun...

Solaris 9 (x86) : 125327-03

SunOS 5.9x86: wget patch. Date this patch was last updated by Sun : Apr/15/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...