[slackware-security] java (jre, jdk)

Sun has released security advisories pertaining to both the Java Runtime Environment and the Standard Edition Development Kit. One such advisory may be found here: http://sunsolve.sun.com/search/document.do?assetkey=1-26-102995-1 Updated versions of both the jre and jdk packages are provided whic...

Mandrake Linux Security Advisory : gimp (MDKSA-2007:170)

Multiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted remote attackers to execute arbitrary code via crafted length values in 1 DICOM, 2 PNM, 3 PSD, 4 PSP, 5 Sun RAS, 6 XBM, and 7 XWD files. CVE-2006-4519 Integer overflow in the seektoandunpackpixeldata...

Sun Solaris ATA 磁盘驱动IOCTL本地拒绝服务漏洞

Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 ata7D磁盘驱动的某些ioctl2函数中的安全漏洞可能允许本地非特权用户导致系统忙碌，造成拒绝服务的情况。 如果出现了上述漏洞，系统会变得忙碌，生成类似于以下的栈追踪： 32位i386系统： atadiskioctl+0x16f dadkioctl+0x1d7 cmdkioctl+0x361 cdevioctl+0x2b specioctl+0x62 fopioctl+0x24 ioctl+0x199 syssysenter+0x101 64位i386系统： atadiskioctl+0x14c...

Code injection

The Sun Admin Console in Sun Application Server 9.00.1 does not apply certain configuration changes persistently, which causes the 1 SSL and 2 SSLMutualAuth ORB listener services to enable all protocols and ciphers after the services are restarted, possibly allowing remote attackers to bypass...

CVE-2007-4511

The Sun Admin Console in Sun Application Server 9.00.1 does not apply certain configuration changes persistently, which causes the 1 SSL and 2 SSLMutualAuth ORB listener services to enable all protocols and ciphers after the services are restarted, possibly allowing remote attackers to bypass...

CVE-2007-4511

The CVE-2007-4511 issue affects Sun Admin Console in Sun Application Server 9.0_0.1. The root problem is that configuration changes are not persisted, causing the SSL and SSL_MutualAuth ORB listener services to enable all protocols and ciphers after a restart. This can allow remote attackers to b...

CVE-2007-4511

The Sun Admin Console in Sun Application Server 9.00.1 does not apply certain configuration changes persistently, which causes the 1 SSL and 2 SSLMutualAuth ORB listener services to enable all protocols and ciphers after the services are restarted, possibly allowing remote attackers to bypass...

Code injection

Unspecified vulnerability in the ata disk driver in Sun Solaris 10 on the x86 platform before 20070821 allows local users to cause a denial of service system panic via an unspecified ioctl function, aka Bug 6433124...

CVE-2007-4495

Unspecified vulnerability in the ata disk driver in Sun Solaris 10 on the x86 platform before 20070821 allows local users to cause a denial of service system panic via an unspecified ioctl function, aka Bug 6433124...

CVE-2007-4495

Unspecified vulnerability in the ata disk driver in Sun Solaris 10 on the x86 platform before 20070821 allows local users to cause a denial of service system panic via an unspecified ioctl function, aka Bug 6433124...

CVE-2007-4495

CVE-2007-4495 concerns the Solaris 10 ata disk driver on x86, with the impact described as a local denial of service via an unspecified ioctl function (Bug 6433124). Connected documents indicate mitigations in Solaris ATA/DT driver updates, e.g., Solaris Update for ata Driver 117122-03 and relate...

Code injection

Multiple unspecified vulnerabilities in the ata disk driver in Sun Solaris 8, 9, and 10 on the x86 platform before 20070821 allow local users to cause a denial of service system panic via unspecified ioctl functions, aka Bug 6433123...

CVE-2007-4492

CVE-2007-4492 describes multiple unspecified vulnerabilities in the Sun Solaris ata disk driver on x86 (Solaris 8/9/10) that can cause a local denial of service via unspecified ioctl calls. Connected documents reference Solaris updates for the ata driver (e.g., 117122-03 and 109798-04) as remedia...

Sun Solaris 8 RBAC远程特权提升漏洞

Sun Solaris是一款商业性质的操作系统。 Sun Solaris 8 RBAC机制存在两个安全问题，远程攻击者可以利用漏洞通过role帐户获得对系统的未授权访问。 目前没有详细漏洞细节提供。 Sun Solaris 8x86 Sun Solaris 8 补丁下载： Sun Solaris 8x86 Sun 127034-01 http://sunsolve.sun.com/search/document.do?assetkey=1-21-127034-01-1 Sun Solaris 8 Sun 127033-01...

Sun Java运行时环境字体解析Applet权限提升漏洞

Sun的Java运行时环境（JRE）为JAVA应用程序提供可靠的运行环境。 JRE字体解析代码的实现上存在漏洞，可能导致非授权的Applet以提升后的权限执行操作。 JRE字体解析代码中的漏洞可能允许不可信任的applet提升权限，例如，Applet可能给予其本身读写本地文件的权限，或者运行了不可信任Applet用户可以执行所能访问到的本地应用程序。 Sun JDK = 5.0 Update 9 Sun JRE = 5.0 Update 9 Sun JRE = 1.4.214 Sun SDK = 1.4.214...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the Role Based Access Control RBAC functionality in Sun Solaris 8 allow remote attackers who know the password for a role to gain privileges via that role...

CVE-2007-4395

Multiple unspecified vulnerabilities in the Role Based Access Control RBAC functionality in Sun Solaris 8 allow remote attackers who know the password for a role to gain privileges via that role...

CVE-2007-4395

Technical details about CVE-2007-4395 are not publicly available in the provided connected documents. The OpenVAS entries and external references do not specify affected products, versions, root cause, or fixes. Monitor for updates.

CVE-2007-4395

Multiple unspecified vulnerabilities in the Role Based Access Control RBAC functionality in Sun Solaris 8 allow remote attackers who know the password for a role to gain privileges via that role...

CVE-2007-4381

Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.214 and earlier, allows remote attackers to perform unauthorized actions via an applet that grants certain privileges to itself...