9002 matches found
CVE-2008-1756
The CVE-2008-1756 entry concerns Sun N1 Grid Engine 6.1, specifically the Qmaster daemon. The vulnerability is described as an unspecified local issue that allows a denial of service (daemon crash). The available documents identify the affected component (Qmaster daemon) and the impact (local DoS...
CVE-2008-1756
Unspecified vulnerability in the Qmaster daemon in Sun N1 Grid Engine 6.1 allows local users to cause a denial of service daemon crash via unspecified vectors...
Adobe Flash Player Multimedia File Remote Buffer Overflow Vulnerability
Description Adobe Flash Player is prone to a remote buffer-overflow vulnerability when handling multimedia files with certain tags. An attacker may exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in...
Sun Java System Messenger Express 6.1-13-15 - sid Cross-Site Scripting
Sun Java System Messenger Express 6.1-13-15 - sid Cross-Site Scripting source: https://www.securityfocus.com/bid/28649/info Sun Java System Messenger Express is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may...
Sun Java System Messenger Express 6.1-13-15 - 'sid' Cross-Site Scripting
source: https://www.securityfocus.com/bid/28649/info Sun Java System Messenger Express is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
CVE-2008-1684
inetd on Sun Solaris 10, when debug logging is enabled, allows local users to write to arbitrary files via a symlink attack on the /var/tmp/inetd.log temporary file...
Arbitrary file deletion
inetd on Sun Solaris 10, when debug logging is enabled, allows local users to write to arbitrary files via a symlink attack on the /var/tmp/inetd.log temporary file...
CVE-2008-1684
CVE-2008-1684 affects Sun Solaris 10 where inetd with debug logging enabled allows a local user to write to arbitrary files via a symlink attack on /var/tmp/inetd.log. The vulnerability is triggered locally (attack vector: LOCAL) with integrity and confidentiality unaffected, but availability can...
SuSE 10 Security Update : Sun Java (ZYPP Patch Number 5131)
Sun Java was updated to 1.4.2u17 to fix following security vulnerabilities : - Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment JRE and JDK 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.216 and earlier allows remote attackers should gain...
openSUSE 10 Security Update : java-1_4_2-sun (java-1_4_2-sun-5130)
Sun Java was updated to 1.4.2u17 to fix following security vulnerabilities : - CVE-2008-1158: Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment JRE and JDK 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.216 and earlier allows remote attackers...
Solaris 9 (x86) : 127430-07
N1 Grid Engine 6.1x86: maintenance patch. Date this patch was last updated by Sun : Nov/24/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...
openSUSE 10 Security Update : java-1_5_0-sun (java-1_5_0-sun-5133)
Sun Java was updated to 1.5.0u15 to fix following security vulnerabilities : - CVE-2008-1158: Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment JRE and JDK 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.216 and earlier allows remote attackers...
openSUSE 10 Security Update : java-1_6_0-sun (java-1_6_0-sun-5132)
Sun Java was updated to 1.6.0u5 to fix following security vulnerabilities : - CVE-2008-1158: Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment JRE and JDK 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.216 and earlier allows remote attackers...
Buffer overflow security vulnerabilities in Java Web Start (CVE-2008-1189, CVE-2008-1190)
Buffer overflow in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.216 and earlier allows remote attackers to execute arbitrary code via unknown vectors, a different issue than CVE-2008-1188, aka the "third" issue...
JRE image parsing library allows privilege escalation (CVE-2008-1194)
Multiple unspecified vulnerabilities in the color management library in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allows remote attackers to cause a denial of service crash via unknown vectors...
Buffer overflow security vulnerabilities in Java Web Start (CVE-2008-1189, CVE-2008-1190)
Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.216 and earlier allows remote attackers to gain privileges via an untrusted application, a different issue than CVE-2008-1191, aka the "fourth" issue...
Mozilla Foundation Security Advisory 2008-18
Mozilla Foundation Security Advisory 2008-18 Title: Java socket connection to any local port via LiveConnect Impact: High Announced: March 25, 2008 Reporter: Gregory Fleischer Products: Firefox, SeaMonkey Fixed in: Firefox 2.0.0.13 SeaMonkey 1.1.9 Description Security researcher Gregory Fleischer...
多家厂商rpc.ypupdated远程可执行任意命令漏洞
BUGTRAQ ID: 1749 CVECAN ID: CVE-1999-0208 rpc.ypupdated RPC守护进程是Network Information Service NIS的一个组件，它使NIS客户端更新自己的NIS数据库。 rpc.ypupdated守护进程实现上存在输入验证漏洞，远程攻击者可能利用此漏洞以root用户的权限在主机上执行任意命令。 当守护进程收到一个Yello Pages的更新请求，它会调用Bource...
Java socket connection to any local port via LiveConnect — Mozilla
Security researcher Gregory Fleischer demonstrated that web content fetched via the jar: protocol can use Java via LiveConnect to open socket connections to arbitrary ports on the user's machine "localhost". The issue is caused by improper parsing of the content origin passed from the browser to...