Design/Logic Flaw

Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.214 and earlier, allows remote attackers to perform unauthorized actions via an applet that grants certain privileges to itself...

CVE-2007-4381

Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.214 and earlier, allows remote attackers to perform unauthorized actions via an applet that grants certain privileges to itself...

CVE-2007-4381

Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.214 and earlier, allows remote attackers to perform unauthorized actions via an applet that grants certain privileges to itself...

CVE-2007-4381

CVE-2007-4381 is a font-parsing vulnerability in Sun JDK/JRE up to specified versions (5.0 Update 9 and earlier; 1.4.2_14 and earlier) that could let an untrusted applet gain the same privileges as the user running the applet, enabling unauthorized actions via an applet. Public advisories from Re...

Sun Java JRE Font Parsing Privilege Escalation (103024)

According to its version number, the Sun Java Runtime Environment JRE installed on the remote host reportedly contains an issue in its font parsing code that may allow an untrusted applet to gain elevated privileges and, for example read or write local files or execute local applications...

Sun Java Runtime Environment 1.4.2 - Font Parsing Privilege Escalation

source: https://www.securityfocus.com/bid/25340/info The Sun Java Runtime Environment is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the user who invoked the Java applet. Successfully exploiting this issu...

CVE-2007-4310

The finger daemon in.fingerd in Sun Solaris 7 through 9 allows remote attackers to list all accounts that have certain nonstandard GECOS fields via a request composed of a single digit, as demonstrated by a "finger 9@host" command, a different vulnerability than CVE-2001-1503...

Command injection

The finger daemon in.fingerd in Sun Solaris 7 through 9 allows remote attackers to list all accounts that have certain nonstandard GECOS fields via a request composed of a single digit, as demonstrated by a "finger 9@host" command, a different vulnerability than CVE-2001-1503...

CVE-2007-4310

The finger daemon in.fingerd in Sun Solaris 7 through 9 allows remote attackers to list all accounts that have certain nonstandard GECOS fields via a request composed of a single digit, as demonstrated by a "finger 9@host" command, a different vulnerability than CVE-2001-1503...

CVE-2007-4310

CVE-2007-4310 concerns the Sun Solaris finger daemon (in.fingerd) on Solaris 7–9. The vulnerability allows remote attackers to list accounts that have certain nonstandard GECOS fields by sending a request consisting of a single digit (e.g., finger 9@host). The issue is separate from CVE-2001-1503...

Sun ONE Web Server Version Detection

Binary data 4165.prm...

CVE-2007-4289

The connected records indicate CVE-2007-4289 is related to improper handling of XSLT stylesheets in XML signatures, affecting Sun Java System Access Manager 6.3–7.1 and Sun Java System Identity Server 6.1–6.2, where crafted XSLT transforms could allow context-dependent attackers to execute arbitr...

Sun Solaris底带宽X代理信息泄露漏洞

BUGTRAQ ID: 25070 CNCAN ID:CNCAN-2007080108 Solaris是一款Sun公司开发的UNIX操作系统。 Solaris底带宽代理lbxproxy1存在安全问题，本地攻击者可以利用漏洞获得敏感信息。 本地非特权用户可以读取ROOT属性的任意文件数据信息，导致敏感信息泄露。 Sun Solaris 10.0 x86 Sun Solaris 10.0 Sun Solaris 9x86 Sun Solaris 9 Sun Solaris 8x86 Sun Solaris 8 升级程序： Sun Solaris 9x86 Sun 112786-51...

Sun Solaris DTrace本地拒绝服务漏洞

BUGTRAQ ID: 25151 CNCAN ID:CNCAN-2007080107 Sun Solaris是一款商业性质的操作系统。 Sun Solaris包含的DTrace存在安全问题，本地攻击者可以利用漏洞运行部分DTrace程序引起系统不稳定或崩溃。 目前没有详细漏洞细节提供。 Sun Solaris 10.0 x86 Sun Solaris 10 补丁下载： Sun Solaris 10 Sun 125100-10 http://sunsolve.sun.com/search/document.do?assetkey=1-21-125100-10-1...

Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit

Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit JDK before 1.5.011-b03 and 1.6.x before 1.6.001-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.214 and earlier, and SDK and JRE 1.3.120 and earlier...

HTML files generated with Javadoc are vulnerable to a XSS

The Javadoc tool in Sun JDK 6 and JDK 5.0 Update 11 can generate HTML documentation pages that contain cross-site scripting XSS vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

BMP image parser vulnerability

The BMP image parser in Sun Java Development Kit JDK before 1.5.011-b03 and 1.6.x before 1.6.001-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.214 and earlier, and SDK and JRE 1.3.119 and earlier, when running on Unix/Linux systems,...

Crlf injection

CRLF injection vulnerability in the redirect feature in Sun Java System Web Server 6.1 and 7.0 before 20070802, when the redirect Server Application Function SAF uses the url-prefix parameter and escape is disabled, or an Error directive uses the url-prefix parameter in obj.conf, allows remote...

CVE-2007-4164

CRLF injection vulnerability in the redirect feature in Sun Java System Web Server 6.1 and 7.0 before 20070802, when the redirect Server Application Function SAF uses the url-prefix parameter and escape is disabled, or an Error directive uses the url-prefix parameter in obj.conf, allows remote...

CVE-2007-4164

CVE-2007-4164 affects Sun Java System Web Server 6.1 and 7.0; CRLF injection in the redirect SAF when url-prefix is used (escape disabled) or Error directive uses url-prefix in obj.conf, enabling remote HTTP header injection/response splitting. Affected products require patches: Web Server 6.1 pa...