9002 matches found
CVE-2007-3069
xscreensaver in Sun Solaris 10 before 20070604, when a GNOME session with Assistive Technology support is running, allows attackers with physical access to take control of the session after entering an Alt-Tab sequence...
Session fixation
xscreensaver in Sun Solaris 10 before 20070604, when a GNOME session with Assistive Technology support is running, allows attackers with physical access to take control of the session after entering an Alt-Tab sequence...
CVE-2007-3069
xscreensaver in Sun Solaris 10 before 20070604, when a GNOME session with Assistive Technology support is running, allows attackers with physical access to take control of the session after entering an Alt-Tab sequence...
CVE-2007-3069
CVE-2007-3069 affects Sun Solaris 10 prior to patch 120095-36 (x86) / 120094-36 (sparc) where an active GNOME session with Assistive Technology support can be hijacked via an Alt-Tab sequence when a local attacker has physical access. The description from the primary source specifies the vulnerab...
Java Runtime Environment Image Parsing Code buffer overflow vulnerability
Overview The Sun Java Runtime Environment contains a buffer overflow vulnerability that may allow an attacker to execute code or read local files. Description The Java Runtime Environment JRE is a group software packages from Sun Microsystems that allow a computer to access and use Java...
Solaris 5.8 (x86) : 120982-18
Sun Java System Web Proxy Server 4.0.11, x86 SVR4 patch: Mainte. Date this patch was last updated by Sun : Aug/04/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...
My Datebook SQL Injection + XSS
Application: My Datebook Web Sites: http://mealex.com/scripts.html http://www.theadminshop.com/ Versions: any no version numbers can be found Platform: linux, windows, freebsd, sun Bug: SQL Injection + XSS Severity: High since there is no need to authenticate. Fix Available: No...
Solaris 5.8 (sparc) : 120981-18
Sun Java System Web Proxy Server 4.0.11, Solaris SVR4 patch: Mai. Date this patch was last updated by Sun : Aug/04/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...
Solaris 9 (sparc) : 120228-45
Messaging Server 6.3-16.01: core patch. Date this patch was last updated by Sun : Nov/30/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...
Solaris 5.10 (sparc) : 120981-18
Sun Java System Web Proxy Server 4.0.11, Solaris SVR4 patch: Mai. Date this patch was last updated by Sun : Aug/04/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...
GLSA-200705-23 : Sun JDK/JRE: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200705-23 Sun JDK/JRE: Multiple vulnerabilities An unspecified vulnerability involving an 'incorrect use of system classes' was reported by the Fujitsu security team. Additionally, Chris Evans from the Google Security Team reporte...
Sun Java运行时环境图形解析缓冲区溢出漏洞
Sun的Java运行时环境（JRE）为JAVA应用程序提供可靠的运行环境。 JRE的图形解析代码实现上存在漏洞，本地攻击攻击者可能利用此漏洞提升自己的权限。 Java运行时环境图形解析代码中的缓冲区溢出漏洞可能允许不可信任的applet或应用程序提升权限，例如，applet可能给予其自身读写本地文件或执行运行不可信任applet用户可访问的本地应用程序的权限，还可能导致Java虚拟机挂起。 Sun JDK 6 Sun JDK 5.0 Update 10 Sun JRE 6 Sun JRE 5.0 Update 10 Sun JRE 1.4.214 Sun JRE 1.3.120 Sun...
Solaris 5.10 (x86) : 120982-18
Sun Java System Web Proxy Server 4.0.11, x86 SVR4 patch: Mainte. Date this patch was last updated by Sun : Aug/04/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...
Solaris 9 (x86) : 117468-20
SunOS 5.9x86: NFS patch. Date this patch was last updated by Sun : Mar/09/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...
Sun Java JRE Image Parsing Vulnerabilities (102934)
According to its version number, the Sun Java Runtime Environment JRE installed on the remote host reportedly is affected by a buffer overflow in its image processing code as well as another issue that may cause the Java Virtual Machine to hang. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
CVE-2007-2989
The libike library in Sun Solaris 9 before 20070529 contains a logic error related to a certain pointer, which allows remote attackers to cause a denial of service in.iked daemon crash by sending certain UDP packets with a source port different from 500. NOTE: this issue might overlap CVE-2006-22...
CVE-2007-2990
Unspecified vulnerability in inetd in Sun Solaris 10 before 20070529 allows local users to cause a denial of service daemon termination via unspecified manipulations of the /var/run/.inetd.uds Unix domain socket file...
CVE-2007-2990
Solaris 10 (SunOS 5.10) contains an unspecified local-denial-of-service vulnerability in inetd prior to 20070529, triggered by manipulating the /var/run/.inetd.uds Unix domain socket. The issue affects inetd itself and can terminate the daemon. Patch guidance available in Sun patch 121288-03 (SPA...
CVE-2007-2989
CVE-2007-2989 affects the libike library in Sun Solaris 9 prior to 20070529. A logic error related to a specific pointer allows remote attackers to cause a denial of service by sending certain UDP packets with a source port different from 500, crashing the in.iked daemon. The issue overlaps with ...