CVE-2009-1219

Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allows remote attackers to cause a denial of service daemon crash via multiple requests to the default URI with alphabetic characters in the tzid parameter...

CVE-2009-1218

CVE-2009-1218 describes multiple XSS vulnerabilities in Sun Calendar Server components (login.wcap fmt-out and command.shtml date) affecting Sun Calendar Express Web Server, Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6.0–6.3-7.01. The issue arises from improper input sanitiza...

CVE-2009-1219

Summary (CVE-2009-1219) Sun Calendar Express Web Server (Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6, 2004Q2–6.3-7.01) is affected. A remote attacker can cause a denial of service (daemon crash) by sending two consecutive crafted HTTP requests with alphabetic characters in t...

CVE-2009-1218

Multiple cross-site scripting XSS vulnerabilities in Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allow remote attackers to inject arbitrary web script or HTML via 1 the fmt-out parameter to login.wcap or 2 the date...

CVE-2009-1207

CVE-2009-1207 describes a race condition in Solaris dircmp that could allow local users to overwrite arbitrary files via a symlink-based temporary-file attack. Connected documents confirm Solaris 10 (x86) and Solaris 10 (sparc) patches addressing this issue: 141015-01 for x86 and 141014-01 for SP...

Core Security Technologies Advisory 2009.0108

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Multiple vulnerabilities in Sun Calendar Express Web Server 1. Advisory Information Title: Multiple vulnerabilities in Sun Calendar Express Web Server Advisory ID:...

Ghostscript 'CCITTFax' Decoding Filter - Denial of Service

Ghostscript is prone to a remote denial-of-service vulnerability because it fails to properly validate user-supplied input. Exploiting this issue allows remote attackers to crash the application and possibly to execute code, but this has not been confirmed. Vulnerable: Ubuntu Ubuntu Linux 8.10...

Sun Calendar Express Web Server (DoS/XSS) Multiple Remote Vulns

No description provided by source. Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Multiple vulnerabilities in Sun Calendar Express Web Server 1. Advisory Information Title: Multiple vulnerabilities in Sun Calendar Express Web Server Advisory ID: CORE-2009-010...

Ghostscript CCITTFax Decoding Filter - Denial of Service

Ghostscript CCITTFax Decoding Filter - Denial of Service Ghostscript is prone to a remote denial-of-service vulnerability because it fails to properly validate user-supplied input. Exploiting this issue allows remote attackers to crash the application and possibly to execute code, but this has no...

openSUSE 10 Security Update : java-1_5_0-sun (java-1_5_0-sun-6125)

The Sun JDK 5 was updated to Update18 to fix various bugs and security issues. CVE-2009-1093: LdapCtx in the LDAP service in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.124 and earlier; and 1.4.219 and earlier do...

CORE-2009-0108: Multiple vulnerabilities in Sun Calendar Express Web Server

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Multiple vulnerabilities in Sun Calendar Express Web Server 1. Advisory Information Title: Multiple vulnerabilities in Sun Calendar Express Web Server Advisory ID:...

openSUSE 10 Security Update : java-1_6_0-sun (java-1_6_0-sun-6128)

The Sun JDK 6 was updated to Update13 to fix various bugs and security issues. CVE-2009-1093: LdapCtx in the LDAP service in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.124 and earlier; and 1.4.219 and earlier do...

Sun Java System Calendar Server 6.3 - Duplicate URI Request Denial of Service

Sun Java System Calendar Server 6.3 - Duplicate URI Request Denial of Service source: https://www.securityfocus.com/bid/34150/info Sun Java System Calendar Server is prone to a denial-of-service vulnerability because it fails to handle certain duplicate URI requests. An attacker can exploit this...

Sun Calendar Express Web Server (DoS/XSS) Multiple Remote Vulns

Exploit for multiple platform in category dos / poc =============================================================== Sun Calendar Express Web Server DoS/XSS Multiple Remote Vulns =============================================================== Core Security Technologies - CoreLabs Advisory...

RedHat Security Advisory RHSA-2009:0394

The remote host is missing updates announced in advisory RHSA-2009:0394. The Sun 1.5.0 Java release includes the Sun Java 5 Runtime Environment and the Sun Java 5 Software Development Kit. This update fixes several vulnerabilities in the Sun Java 5 Runtime Environment and the Sun Java 5 Software...

Multiple vulnerabilities in Sun Calendar Express Web Server

Advisory ID Internal CORE-2009-0108 1. Advisory Information Title: Multiple vulnerabilities in Sun Calendar Express Web Server Advisory ID: CORE-2009-0108 Advisory URL:https://www.coresecurity.com/core-labs/advisories/sun-calendar-express Date published: 2009-03-31 Date of last update: 2009-03-31...

Sun Java System Calendar Server 6 - command.shtml Cross-Site Scripting

Sun Java System Calendar Server 6 - command.shtml Cross-Site Scripting source: https://www.securityfocus.com/bid/34153/info Sun Java System Calendar Server is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this...

Sun Calendar Express Web Server - Denial of Service Cross-Site Scripting

Sun Calendar Express Web Server - Denial of Service Cross-Site Scripting Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Multiple vulnerabilities in Sun Calendar Express Web Server 1. Advisory Information Title: Multiple vulnerabilities in Sun Calendar Express...

Sun Java System Calendar Server 6.3 - Duplicate URI Request Denial of Service

source: https://www.securityfocus.com/bid/34150/info Sun Java System Calendar Server is prone to a denial-of-service vulnerability because it fails to handle certain duplicate URI requests. An attacker can exploit this issue to crash the Calendar Server, resulting in a denial-of-service condition...

RedHat Security Advisory RHSA-2009:0394

The remote host is missing updates announced in advisory RHSA-2009:0394. The Sun 1.5.0 Java release includes the Sun Java 5 Runtime Environment and the Sun Java 5 Software Development Kit. This update fixes several vulnerabilities in the Sun Java 5 Runtime Environment and the Sun Java 5 Software...