Solaris 9 (sparc) : 118191-05

SunOS 5.9: gtar patch. Date this patch was last updated by Sun : Apr/19/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid3499...

CVE-2008-5266

Cross-site scripting XSS vulnerability in configuration/httpListenerEdit.jsf in the GlassFish 2 UR2 b04 webadmin interface in Sun Java System Application Server 9.101 build b09d-fcs and 9.102 build b04-fcs allows remote attackers to inject arbitrary web script or HTML via the name parameter, a...

CVE-2008-5266

Cross-site scripting XSS vulnerability in configuration/httpListenerEdit.jsf in the GlassFish 2 UR2 b04 webadmin interface in Sun Java System Application Server 9.101 build b09d-fcs and 9.102 build b04-fcs allows remote attackers to inject arbitrary web script or HTML via the name parameter, a...

CVE-2008-5266

Cross-site scripting XSS vulnerability in configuration/httpListenerEdit.jsf in the GlassFish 2 UR2 b04 webadmin interface in Sun Java System Application Server 9.101 build b09d-fcs and 9.102 build b04-fcs allows remote attackers to inject arbitrary web script or HTML via the name parameter, a...

Design/Logic Flaw

The AcquireDaemonLock function in ipcdUnix.cpp in Sun Innotek VirtualBox before 2.0.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.vbox-$USER-ipc/lock temporary file...

CVE-2008-5256

The AcquireDaemonLock function in ipcdUnix.cpp in Sun Innotek VirtualBox before 2.0.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.vbox-$USER-ipc/lock temporary file...

CVE-2008-5256

The CVE-2008-5256 entry concerns VirtualBox prior to 2.0.6. The vulnerability resides in AcquireDaemonLock (ipcdUnix.cpp) and enables local users to overwrite arbitrary files via a symlink attack on a /tmp/.vbox-$USER-ipc/lock temporary file. CVSSv2 base score is 4.4 (Medium) with Local access, N...

Java Web Start, arbitrary file creation (6703909)

Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.218 allows remote attackers to create arbitrary files via the writeManifest method in the CacheEntry class, aka CR 6703909...

HP-UX PHSS_38761 : s700_800 11.X OV NNM7.01 Intermediate Patch 12

s700800 11.X OV NNM7.01 Intermediate Patch 12 : The remote HP-UX host is affected by multiple vulnerabilities : - A potential security vulnerability has been identified with HP OpenView Network Node Manager OV NNM. The vulnerability could be exploited remotely to create a Denial of Service DoS...

PR07-11: Cross-site Request Forgery (CSRF) on Sun Java System Identity Manager

PR07-11: Cross-site Request Forgery CSRF on Sun Java System Identity Manager Date Found: 11th June 2007 Vendor Contacted: 18th June 2007 Date Public: 10th November 2008 Severity: Medium/High Credits: Adrian Pastor and Jan Fry of ProCheckUp Ltd www.procheckup.com. ProCheckUp thanks Sun for working...

Sun Java System Identity Manager multiple security vulnerabilities

Crossite request forgery, unauthorized access...

PR08-09: Unauthenticated File Retrieval on Sun Java System Identity Manager "ext" parameter

PR08-09: Unauthenticated File Retrieval on Sun Java System Identity Manager "ext" parameter Date Found: 25th April 2008 Vendor Contacted: 28th April 2008 Date Public: 10th November 2008 Severity: High Credits: Richard Brain of ProCheckUp Ltd www.procheckup.com. ProCheckUp thanks Sun for working...

Sun Java System Identity Manager目录遍历及跨站请求伪造漏洞

BUGTRAQ ID: 32262 CVECAN ID: CVE-2008-5117,CVE-2008-5118,CVE-2008-5116,CVE-2008-5115,CVE-2008-5114 Sun Java System Identity Manager是一个完整的端到端的保护敏感数据和管理标识配置文件与许可的解决方案。 Identity Manager的/idm/includes/helpServer.jsp服务器端脚本没有正确地验证ext参数，未经认证的远程攻击者可以通过向服务器提交恶意请求执行目录遍历攻击，检索文件系统上任意已知位置上的文件。 Identity...

ProCheckUp Security Advisory 2007.11

PR07-11: Cross-site Request Forgery CSRF on Sun Java System Identity Manager Date Found: 11th June 2007 Vendor Contacted: 18th June 2007 Date Public: 10th November 2008 Severity: Medium/High Credits: Adrian Pastor and Jan Fry of ProCheckUp Ltd www.procheckup.com. ProCheckUp thanks Sun for working...

CVE-2008-5133

ipnat in IP Filter in Sun Solaris 10 and OpenSolaris before snv96, when running on a DNS server with Network Address Translation NAT configured, improperly changes the source port of a packet when the destination port is the DNS port, which allows remote attackers to bypass an intended...

Design/Logic Flaw

ipnat in IP Filter in Sun Solaris 10 and OpenSolaris before snv96, when running on a DNS server with Network Address Translation NAT configured, improperly changes the source port of a packet when the destination port is the DNS port, which allows remote attackers to bypass an intended...

CVE-2008-5133

ipnat in IP Filter in Sun Solaris 10 and OpenSolaris before snv96, when running on a DNS server with Network Address Translation NAT configured, improperly changes the source port of a packet when the destination port is the DNS port, which allows remote attackers to bypass an intended...

CVE-2008-5133

The connected CVE-2008-5133 entry describes Solaris SunOS/OpenSolaris ipnat/IPFilter behavior: on NAT-enabled DNS servers, it improperly alters the source port of a packet when the destination port is DNS, allowing remote attackers to spoof DNS responses and bypass the CVE-2008-1447 protection me...

Directory traversal

Directory traversal vulnerability in idm/includes/helpServer.jsp in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to read arbitrary files in the filesystem of the IDM server via directory traversal sequences in the ext parameter...

Open redirect

Open redirect vulnerability in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...