Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit

Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit JDK before 1.5.011-b03 and 1.6.x before 1.6.001-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.214 and earlier, and SDK and JRE 1.3.120 and earlier...

HTML files generated with Javadoc are vulnerable to a XSS

The Javadoc tool in Sun JDK 6 and JDK 5.0 Update 11 can generate HTML documentation pages that contain cross-site scripting XSS vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Critical: Red Hat Security Advisory: java-1.5.0-sun security update

Updated java-1.5.0-sun packages that correct several security issues are available for Red Hat Enterprise Linux 4 Extras. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Java Runtime Environment JRE contains the software and tools that user...

Design/Logic Flaw

Unspecified vulnerability in the dynamic tracing framework DTrace on Sun Solaris 10 before 20070730 allows local users with PRIVDTRACEUSER privileges to cause a denial of service panic or hang via unspecified use of certain DTrace programs...

CVE-2007-4126

CVE-2007-4126 affects Sun Solaris 10 prior to 20070730, where local users with PRIV_DTRACE_USER privileges can trigger a denial of service (panic or hang) via certain DTrace programs. Affected product is Solaris 10; underlying issue is unspecified use of DTrace programs. Remediation per connected...

CVE-2007-4070

Unspecified vulnerability in Low Bandwidth X proxy lbxproxy on Sun Solaris 8 through 10 before 20070725 allows local users to read arbitrary files with root group ownership via unknown vectors...

CVE-2007-4070

Unspecified vulnerability in Low Bandwidth X proxy lbxproxy on Sun Solaris 8 through 10 before 20070725 allows local users to read arbitrary files with root group ownership via unknown vectors...

CVE-2007-4070

CVE-2007-4070 concerns an unspecified vulnerability in the Low Bandwidth X proxy (lbxproxy) on Sun Solaris 8–10 prior to 20070725. It allows local users to read arbitrary files with root group ownership via unknown vectors. The provided connected documents do not include concrete details on affec...

Sun Solaris finger information leak

Additional accounts unformation is leaked if finger is requested with single digit argument...

CVE-2007-4025

Unspecified vulnerability in Sun Java System SJS Application Server 8.1 through 9.0 before 20070724 on Windows allows remote attackers to obtain JSP source code via unspecified vectors...

Code injection

Unspecified vulnerability in Sun Java System SJS Application Server 8.1 through 9.0 before 20070724 on Windows allows remote attackers to obtain JSP source code via unspecified vectors...

CVE-2007-4025

Unspecified vulnerability in Sun Java System SJS Application Server 8.1 through 9.0 before 20070724 on Windows allows remote attackers to obtain JSP source code via unspecified vectors...

CVE-2007-3922

CVE-2007-3922 describes an unspecified vulnerability in the Sun JDK/JRE applet class loader that allows a remote attacker to violate the applet’s outbound connection restrictions by connecting to localhost services on the host that loaded the applet. Affected products/versions include Sun JDK/JRE...

Solaris 10 (sparc) : 121132-03

SunOS 5.10: cryptmod patch. Date this patch was last updated by Sun : Jul/05/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 8 (x86) : 114670-04

SunOS 5.8x86: /usr/bin/rcp patch. Date this patch was last updated by Sun : Jul/09/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 10 (x86) : 125794-02

SunOS 5.10x86: cryptmod patch. Date this patch was last updated by Sun : Jul/05/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if !...

Solaris 9 (sparc) : 114716-05

SunOS 5.9: rcp patch. Date this patch was last updated by Sun : Jul/06/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid25732...

Solaris 9 (x86) : 114717-05

SunOS 5.9x86: rcp patch. Date this patch was last updated by Sun : Jul/06/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Sun Java JRE XML Signature Command Injection (102993)

The version of Sun Java Runtime Environment JRE installed on the remote host reportedly does not securely process XSLT stylesheets containing XSLT Transforms in XML Signatures. If an attacker can pass a specially crafted XSLT stylesheet to a trusted Java application running on the remote host,...

Sun Java System Access Manager密码信息泄露漏洞

Sun Java System Access Manager是一款为企业提供了身份联合方面的一个可互操作、基于标准的强大验证和授权解决方案。 Sun Java System Access Manager存在设计错误，本地攻击者可以利用漏洞获得用户密码敏感信息。 当在Sun Java System Access Manager的调试级别如果设置为"message"，登录密码会以明文方式记录，因此本地非特权用户可读取。 Sun Java System Access Manager 6.2 2004Q2 Solaris x Sun Java System Access Manager 6.2...