Default credentials

Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows Connector 1.1 and 2.0 expose the LDAP password during a configuration step, which allows local users to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vecto...

Design/Logic Flaw

Sun Sun Ray Server Software 3.1 through 4.0 does not properly restrict access, which allows remote attackers to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vectors...

CVE-2008-5423

Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows Connector 1.1 and 2.0 expose the LDAP password during a configuration step, which allows local users to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vecto...

CVE-2008-5423

Sun Sun Ray Server Software (3.x/4.0) and Sun Ray Windows Connector (1.1/2.0) expose the LDAP password during a configuration step, enabling local users to discover the Sun Ray administrator password and obtain admin access to the Data Store and Administration GUI via the utconfig (Server Softwar...

CVE-2008-5423

Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows Connector 1.1 and 2.0 expose the LDAP password during a configuration step, which allows local users to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vecto...

CVE-2008-5422

Sun Sun Ray Server Software 3.1 through 4.0 does not properly restrict access, which allows remote attackers to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vectors...

CVE-2008-5422

CVE-2008-5422 concerns Sun Sun Ray Server Software 3.1–4.0, where access is not properly restricted, enabling remote attackers to discover the Sun Ray administrator password and gain admin access to the Data Store and Administration GUI via unspecified vectors. Affected products include Sun Ray C...

CVE-2008-5410

The PK11SESSION cache in the OpenSSL PKCS11 engine in Sun Solaris 10 does not maintain reference counts for operations with asymmetric keys, which allows context-dependent attackers to cause a denial of service failed cryptographic operations via unspecified vectors, related to the 1 RSAsign and ...

Design/Logic Flaw

The PK11SESSION cache in the OpenSSL PKCS11 engine in Sun Solaris 10 does not maintain reference counts for operations with asymmetric keys, which allows context-dependent attackers to cause a denial of service failed cryptographic operations via unspecified vectors, related to the 1 RSAsign and ...

Sun xVM VirtualBox < 2.0.6 Insecure Temporary Files Vulnerability - Windows

Sun xVM VirtualBox is prone to an SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.900407";...

CVE-2008-5410

The PK11SESSION cache in the OpenSSL PKCS11 engine in Sun Solaris 10 does not maintain reference counts for operations with asymmetric keys, which allows context-dependent attackers to cause a denial of service failed cryptographic operations via unspecified vectors, related to the 1 RSAsign and ...

US-CERT Technical Cyber Security Alert TA08-340A -- Sun Java Updates for Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA08-340A Sun Java Updates for Multiple Vulnerabilities Original release date: December 05, 2008 Last revised: -- Source: US-CERT Systems Affected Sun Java Runtime Environment versions JDK and...

Sun xVM VirtualBox Insecure Temporary Files Vulnerability (Windows)

This host is installed with Sun xVM VirtualBox and is prone to Insecure Temporary Files vulnerability. OpenVAS Vulnerability Test $Id: secpodvirtualboxacquiredaemonlockvulnwin900407.nasl 7293 2017-09-27 08:49:48Z cfischer $ Description: Sun xVM VirtualBox Insecure Temporary Files Vulnerability...

Sun xVM VirtualBox < 2.0.6 Insecure Temporary Files Vulnerability - Linux

Sun xVM VirtualBox is prone to an SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:sun:xvmvirtualbox"; ifdescription...

Sun xVM VirtualBox Insecure Temporary Files Vulnerability (Linux)

This host is installed with Sun xVM VirtualBox and is prone to Insecure Temporary Files vulnerability. OpenVAS Vulnerability Test $Id: secpodvirtualboxacquiredaemonlockvulnlin900408.nasl 7823 2017-11-20 08:54:04Z cfischer $ Description: Sun xVM VirtualBox Insecure Temporary Files Vulnerability...

CVE-2008-5410

CVE-2008-5410 concerns Solaris 10: the PK11_SESSION cache in the OpenSSL PKCS#11 engine does not maintain reference counts for operations with asymmetric keys, enabling context-dependent denial of service during RSA_sign/RSA_verify operations. The issue affects SunOS/Solaris 10 environments using...

ZDI-08-081: Sun Java Web Start and Applet Multiple Sandbox Bypass Vulnerabilities

ZDI-08-081: Sun Java Web Start and Applet Multiple Sandbox Bypass Vulnerabilities http://www.zerodayinitiative.com/advisories/ZDI-08-081 December 4, 2008 -- Affected Vendors: Sun Microsystems -- Affected Products: Sun Microsystems Java Runtime -- TippingPointTM IPS Customer Protection: TippingPoi...

Sun Java JDK/JRE安全更新修复多个漏洞

BUGTRAQ ID: 32620,32608 CVECAN ID:...

ZDI-08-080: Sun Java AWT Library Sandbox Violation Vulnerability

ZDI-08-080: Sun Java AWT Library Sandbox Violation Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-080 December 4, 2008 -- Affected Vendors: Sun Microsystems -- Affected Products: Sun Microsystems Java Runtime -- TippingPointTM IPS Customer Protection: TippingPoint IPS customers...

iDefense Security Advisory 12.04.08: Sun Java JRE TrueType Font Parsing Heap Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDefense Security Advisory 12.02.08 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 02, 2008 I. BACKGROUND The Sun Java JRE is Sun's implementation of the Java runtime. For more information, see the vendor's site found at the following link...