Sun Glassfish Woodstock Project 4.2 XSS

Digital Security Research Group DSecRG Advisory DSECRG-09-038 Original advisory: http://dsecrg.com/pages/vul/show.php?id=138 Application: Sun Glassfish Woodstock Project part of Glassfish Enterprise Server Versions Affected: 4.2 Vendor URL: https://woodstock.dev.java.net/ Bug: Linked XSS...

Solaris 10 OpenSolaris - fasttrap Local Kernel Denial of Service (PoC)

Solaris 10 OpenSolaris - fasttrap Local Kernel Denial of Service PoC / solaris-fasttrap-dos.c Copyright c 2008 by Solaris = 10/Opensolaris local kernel DoS POC by mu-b - Wed 19 Nov 2008 - Tested on: Sun Solaris 10 SPARC Sun OpenSolaris include include include include include include define...

Sun Java Directory Server Information Disclosure Vulnerability - Linux

Sun Java Directory Server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sun Java Directory Server Information Disclosure Vulnerability - Windows

Sun Java Directory Server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sun Java Directory Server Information Disclosure Vulnerability (Linux)

This host is running Sun Java Directory Server and is prone to Information Disclosure Vulnerability. OpenVAS Vulnerability Test $Id: secpodsunjavadirserverinfodiscvulnlin.nasl 5122 2017-01-27 12:16:00Z teissa $ Sun Java Directory Server Information Disclosure Vulnerability Linux Authors: Sujit...

Sun Java Directory Server Detection (Linux/Unix SSH Login)

This script detects the version of Directory Server. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sun Java Directory Server Information Disclosure Vulnerability (Windows)

This host is running Sun Java Directory Server and is prone to Information Disclosure Vulnerability. OpenVAS Vulnerability Test $Id: secpodsunjavadirserverinfodiscvulnwin.nasl 5122 2017-01-27 12:16:00Z teissa $ Sun Java Directory Server Information Disclosure Vulnerability Windows Authors: Sujit...

Sun Java Directory Server Detection (Windows SMB Login)

Detects the installed version of Sun Java Directory Server. This script detects the version of Directory Server. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Sun Java Directory Server Version Detection (Linux)

This script detects the version of Directory Server and sets the reuslt in KB. OpenVAS Vulnerability Test $Id: secpodsunjavadirserverdetectlin.nasl 7823 2017-11-20 08:54:04Z cfischer $ Sun Java Directory Server Version Detection Linux Authors: Sujit Ghosal Copyright: Copyright c 2009 SecPod,...

CVE-2009-1478

CVE-2009-1478 affects Sun Solaris 10 (x86 and SPARC) and OpenSolaris prior to snv_114, due to multiple unspecified vulnerabilities in the DTrace ioctl handlers that can cause a local denial of service (panic). Nessus/OpenVAS entries describe patch-based mitigations: Solaris 10 patch 141766-01 (x8...

Sun Java System Identity Manager Account Disclosure

The version of Sun Java System Identity Manager running on the remote host has the following account enumeration vulnerabilities : - The error message for a failed login attempt is different, depending on whether or not a valid username was given. - Requesting...

CVE-2009-1190

CVE-2009-1190 is an algorithmic complexity vulnerability in java.util.regex.Pattern.compile. The issue arises when the JVM compiles long regex patterns containing multiple optional groups, leading to CPU exhaustion and a potential denial of service. Affected products listed in the description inc...

CVE-2009-1190

Algorithmic complexity vulnerability in the java.util.regex.Pattern.compile method in Sun Java Development Kit JDK before 1.6, when used with spring.jar in SpringSource Spring Framework 1.1.0 through 2.5.6 and 3.0.0.M1 through 3.0.0.M2 and dm Server 1.0.0 through 1.0.2, allows remote attackers to...

Solaris 5.10 (x86) : 137180-12

Service Provisioning System 6.0x86: Master Server Patch. Date this patch was last updated by Sun : Apr/24/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security if ...

Solaris 5.9 (sparc) : 137180-12

Service Provisioning System 6.0x86: Master Server Patch. Date this patch was last updated by Sun : Apr/24/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security if...

Adobe Reader 'spell.customDictionaryOpen()' JavaScript Function Remote Code Execution Vulnerability

Description Adobe Reader is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the application or crash the application, denying service to legitimate users. Reader 8.1.4 for Linux is vulnerable; oth...

Solaris 5.8 (sparc) : 137182-12

Service Provisioning System 6.0: Command Line User Interface Patch. Date this patch was last updated by Sun : Apr/24/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...

MIT Kerberos ASN.1 asn1_decode_generaltime Uninitialized Pointer Reference (CVE-2009-0846)

MIT Kerberos V5 is an implementation of the Kerberos protocol that allows for the negotiation of an authenticated, and optionally encrypted, communication channel between two points on a network. The MIT Kerberos V5 server utilizes the encrypted SUN-RPC protocol to communicate with its remote...

Solaris 5.10 (sparc) : 137179-12

Service Provisioning System 6.0: Master Server Patch. Date this patch was last updated by Sun : Apr/24/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security if !...

Solaris 5.9 (sparc) : 137183-12

Service Provisioning System 6.0x86: Command Line User Interface P. Date this patch was last updated by Sun : Apr/24/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...