Sun Java System Communications Express 6.3 - search.xml Cross-Site Scripting

Sun Java System Communications Express 6.3 - search.xml Cross-Site Scripting source: https://www.securityfocus.com/bid/34154/info Sun Java System Communications Express is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may...

Sun Solaris 9 'fstat(2)'系统调用本地拒绝服务漏洞

Bugraq ID: 34979 CNCAN ID：CNCAN-2009051605 Sun Solaris是一款商业性质的操作系统。 Sun Solaris 9 'fstat2'系统调用存在未明错误，本地攻击者可以利用漏洞对系统进行拒绝服务攻击。 目前没有详细漏洞细节提供。 Sun Solaris 9x86 Sun Solaris 9 可采用如下补丁程序： -- SPARC Platform -- 采用补丁122300-40及之后版本 -- x86 Platform -- 采用补丁122301-40及之后版本...

Sun Java System Communications Express 6.3 - 'UWCMain' Cross-Site Scripting

source: https://www.securityfocus.com/bid/34155/info Sun Java System Communications Express is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. This issue is tracked by Sun Alert ID 258068. An attacker may leverage this issue to execute...

Sun Java System Communications Express 6.3 - 'search.xml' Cross-Site Scripting

source: https://www.securityfocus.com/bid/34154/info Sun Java System Communications Express is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Sun Java System Communications Express 6.3 - UWCMain Cross-Site Scripting

Sun Java System Communications Express 6.3 - UWCMain Cross-Site Scripting source: https://www.securityfocus.com/bid/34155/info Sun Java System Communications Express is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. This issue is tracke...

Multiple XSS in Sun Communications Express

Advisory ID Internal CORE-2009-0109 1. Advisory Information Title: Multiple XSS in Sun Communications Express Advisory ID: CORE-2009-0109 Advisory URL:https://www.coresecurity.com/core-labs/advisories/sun-communications-express Date published: 2009-05-20 Date of last update: 2009-05-20 Vendors...

Solaris 10 (x86) : 140566-02

SunOS 5.10x86: kaio patch. Date this patch was last updated by Sun : May/18/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

CVE-2009-1672

The Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment aka JRE 6 Update 13 allows remote attackers to 1 execute arbitrary code via a .jnlp URL in the argument to the launch method, and might allow remote attackers to launch JRE installation processes v...

CVE-2009-1673

The kernel in Sun Solaris 9 allows local users to cause a denial of service panic by calling fstat with a first argument of ATFDCWD...

CVE-2009-1671

Multiple buffer overflows in the Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment aka JRE 6 Update 13 allow remote attackers to execute arbitrary code via a long string argument to the 1 setInstallerType, 2 setAdditionalPackages, 3 compareVersion, 4...

Code injection

The kernel in Sun Solaris 9 allows local users to cause a denial of service panic by calling fstat with a first argument of ATFDCWD...

Buffer overflow

Multiple buffer overflows in the Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment aka JRE 6 Update 13 allow remote attackers to execute arbitrary code via a long string argument to the 1 setInstallerType, 2 setAdditionalPackages, 3 compareVersion, 4...

CVE-2009-1672

The Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment aka JRE 6 Update 13 allows remote attackers to 1 execute arbitrary code via a .jnlp URL in the argument to the launch method, and might allow remote attackers to launch JRE installation processes v...

CVE-2009-1671

Multiple buffer overflows in the Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment aka JRE 6 Update 13 allow remote attackers to execute arbitrary code via a long string argument to the 1 setInstallerType, 2 setAdditionalPackages, 3 compareVersion, 4...

CVE-2009-1673

The kernel in Sun Solaris 9 allows local users to cause a denial of service panic by calling fstat with a first argument of ATFDCWD...

CVE-2009-1671

Sun Java SE Runtime Environment (JRE) 6 Update 13 includes the deploytk.dll Deployment Toolkit ActiveX control (version 6.0.130.3) that contains multiple buffer-overflow vulnerabilities. A long string argument to methods setInstallerType, setAdditionalPackages, compareVersion, getStaticCLSID, or ...

CVE-2009-1673

CVE-2009-1673 : Solaris 9 kernel vulnerability allows local users to trigger a denial of service (panic) by calling fstat with a first argument of AT_FDCWD. The available sources confirm the affected platform and the specific function/argument combination, but do not provide additional exploit st...

Solaris 10 (x86) : 140084-02

SunOS 5.10x86: sh patch. Date this patch was last updated by Sun : Jul/07/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 10 (x86) : 140130-10

SunOS 5.10x86: pamkrb5.so.1 patch. Date this patch was last updated by Sun : Aug/17/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 10 (sparc) : 139967-02

SunOS 5.10: usr/sbin/rpc.metad patch. Date this patch was last updated by Sun : Apr/28/11 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/12. C Tenable Network Security, Inc. if !...