Sun Java HsbParser.getSoundBank Stack Buffer Overflow (CVE-2009-3867)

Java Technology is a programing platform developed by Sun Microsystems which aims to provide a system for developing and deploying cross-platform applications. Java is used in a wide variety programs that are deployed on personal computers as well as embedded devices and cell phones. Java is wide...

Sun Java System Web Server Denial of Service Vulnerability - Windows

Sun Java Web Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sun Java System Web Server < 7.0 Update 8 Multiple Heap-based Buffer Overflow Vulnerabilities

Sun Java Web Server is prone to multiple heap-based buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Update Protection against Sun Java System Application Server HTTP TRACE Vulnerability

Sun Java System Application Server 7 and 7 2004Q2 enables the HTTP TRACE method which can be leveraged by attackers to gain access to sensitive user information. The HTTP TRACE method returns the contents of client HTTP requests in the entity-body of the TRACE response. A local or remote...

CVE-2004-2765

Cross-site scripting XSS vulnerability in Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before 5.2hf2.02, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via a crafted e-mail message, a different vulnerability than...

CVE-2004-2766

Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before 5.2hf2.02 allows remote attackers to obtain unspecified "access" to e-mail via a crafted e-mail message, related to a "session hijacking" issue, a different vulnerability than CVE-2005-2022 and CVE-2006-5486...

CVE-2005-4885

Unspecified vulnerability on certain Sun StorEdge 6130 SE6130 Controller Arrays allows remote attackers to delete data via unknown vectors...

CVE-2003-1575

VERITAS File System VxFS 3.3.3, 3.4, and 3.5 before MP1 Rolling Patch 02 for Sun Solaris 2.5.1 through 9 does not properly implement inheritance of default ACLs in certain circumstances related to the characteristics of a directory inode, which allows local users to bypass intended file permissio...

CVE-2003-1576

Buffer overflow in pamverifier in Change Manager CM 1.0 for Sun Management Center SunMC 3.0 on Solaris 8 and 9 on the sparc platform allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2004-2766

CVE-2004-2766 affects Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 prior to 5.2hf2.02. A crafted e-mail message can enable remote attackers to obtain unspecified access to e-mail, described as related to a session hijacking issue. The description does not specify the affected pro...

CVE-2004-2765

Cross-site scripting XSS vulnerability in Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before 5.2hf2.02, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via a crafted e-mail message, a different vulnerability than...

CVE-2003-1576

Buffer overflow in pamverifier in Change Manager CM 1.0 for Sun Management Center SunMC 3.0 on Solaris 8 and 9 on the sparc platform allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2003-1576

CVE-2003-1576 describes a buffer overflow in pamverifier within Change Manager (CM) 1.0 for Sun Management Center (SunMC) 3.0 on Solaris 8/9 SPARC. The vulnerability allows remote code execution via unspecified vectors. Affected components include pamverifier in CM 1.0 on Solaris SPARC. The issue...

CVE-2005-4885

Technical details of CVE-2005-4885 are not provided in the supplied documents; no concrete exploit/vector/affected products are specified here. Monitor for updates.

CVE-2004-2765

CVE-2004-2765 is an XSS vulnerability in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 prior to 5.2hf2.02. The issue occurs in Webmail when using Internet Explorer, where a crafted e-mail message can cause arbitrary web script/HTML to be injected. Connected sources (Red Hat and NV...

CVE-2005-4885

Unspecified vulnerability on certain Sun StorEdge 6130 SE6130 Controller Arrays allows remote attackers to delete data via unknown vectors...

CVE-2003-1575

The CVE-2003-1575 entry concerns VERITAS File System (VxFS) versions 3.3.3, 3.4, and 3.5 before MP1 Rolling Patch 02 for Sun Solaris 2.5.1 through 9. The issue is an incorrect inheritance of default ACLs related to directory inode characteristics, which can allow local users to bypass intended fi...

CVE-2004-2766

Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before 5.2hf2.02 allows remote attackers to obtain unspecified "access" to e-mail via a crafted e-mail message, related to a "session hijacking" issue, a different vulnerability than CVE-2005-2022 and CVE-2006-5486...

CVE-2010-0389

The admin server in Sun Java System Web Server 7.0 Update 6 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an HTTP request that lacks a method token...

CVE-2010-0387

Multiple heap-based buffer overflows in 1 webservd and 2 the admin server in Sun Java System Web Server 7.0 Update 7 allow remote attackers to cause a denial of service daemon crash and possibly have unspecified other impact via a long string in an "Authorization: Digest" HTTP header...