CVE-2007-0482

cgi-bin/main in Sun Ray Server Software 2.0 and 3.0 before 20070123 allows local users to obtain the utadmin password by reading a web server's log file, or by conducting a different, unspecified local attack...

CVE-2007-0482

cgi-bin/main in Sun Ray Server Software 2.0 and 3.0 before 20070123 allows local users to obtain the utadmin password by reading a web server's log file, or by conducting a different, unspecified local attack...

CVE-2007-0482

The CVE-2007-0482 entry concerns Sun Ray Server Software 2.0 and 3.0 prior to 20070123, where local users could obtain the utadmin password by reading the web server log or via an unspecified local attack. The vulnerability is characterized as a local, low-complexity issue with partial confidenti...

Code injection

Multiple unspecified vulnerabilities in tip in Sun Solaris 8, 9, and 10 allow local users to gain uucp account privileges via unspecified vectors...

CVE-2007-0470

CVE-2007-0470 references multiple unknown vulnerabilities in the SunOS tip utility on Solaris 8/9/10 that enable local privilege escalation to the uucp account. The CVE is addressed by Sun patch 124998-01 for Solaris 10 x86 and 124997-01 for Solaris 10 SPARC, and related advisories note installin...

[SA23900] Sun Ray Server Software Password Disclosure

TITLE: Sun Ray Server Software Password Disclosure SECUNIA ADVISORY ID: SA23900 VERIFY ADVISORY: http://secunia.com/advisories/23900/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: Sun Ray Server Software SRSS 3.x http://secunia.com/product/11259/...

Sun Solaris tip privilege escalation

Privilege escalation to 'uucp' user...

[SA23821] Sun Solaris "tip" Command Privilege Escalation

---------------------------------------------------------------------- Secunia is proud to announce the availability of the Secunia Software Inspector. The Secunia Software Inspector is a free service that detects insecure versions of software that you may have installed in your system. When...

security flaw

Unspecified vulnerability in Sun Java Development Kit JDK and Java Runtime Environment JRE 5.0 Update 5 and earlier, Java System Development Kit SDK and JRE 1.4.210 and earlier 1.4.x versions, and SDK and JRE 1.3.118 and earlier allows attackers to use untrusted applets to "access data in other...

Sun Ray Server password information leak

/cgi-bin/mail scripts records utadmin administrator's password is recorded into log file...

java-jre: GIF buffer overflow

Buffer overflow in Sun JDK and Java Runtime Environment JRE 5.0 Update 9 and earlier, SDK and JRE 1.4.212 and earlier, and SDK and JRE 1.3.118 and earlier allows applets to gain privileges via a GIF image with a block with a 0 width field, which triggers memory corruption...

JvmGifVulPoc.java.txt

/ FileName: JvmGifVulPoc.java Date: 2007-01-21 Description: Sun Microsystems Java GIF File Parsing Memory Corruption Vulnerability Prove Of Concept Exploit Environment: Only successfully tested on Sun Jre 1.5 Author: luoluo Contact: luoluonetathotmail.com || luoluonetat126.com ||...

Sun Java memory corruption

Memory corruption on GIF files parsing with 0 width block. Can be used for hidden malware installation...

Sun JDK/JRE: Multiple vulnerabilities

Background The Sun Java Development Kit JDK and the Sun Java Runtime Environment JRE provide the Sun Java platform. Description Chris Evans has discovered multiple buffer overflows in Sun JDK and Sun JRE possibly related to various AWT or font layout functions. Tom Hawtin has discovered an...

Sun Microsystems Java GIF File Parsing Memory Corruption Exploit

No description provided by source. / FileName: JvmGifVulPoc.java Date: 2007-01-21 Description: Sun Microsystems Java GIF File Parsing Memory Corruption Vulnerability Prove Of Concept Exploit Environment: Only successfully tested on Sun Jre 1.5 Author: luoluo Contact: luoluonetathotmail.com ||...

Sun Microsystems Java GIF File Parsing Memory Corruption Exploit

Exploit for unknown platform in category remote exploits ================================================================ Sun Microsystems Java GIF File Parsing Memory Corruption Exploit ================================================================ / FileName: JvmGifVulPoc.java Date: 2007-01-2...

Sun Microsystems Java - .GIF File Parsing Memory Corruption

Sun Microsystems Java - .GIF File Parsing Memory Corruption / FileName: JvmGifVulPoc.java Date: 2007-01-21 Description: Sun Microsystems Java GIF File Parsing Memory Corruption Vulnerability Prove Of Concept Exploit Environment: Only successfully tested on Sun Jre 1.5 Author: luoluo Contact:...

Sun Microsystems Java - '.GIF' File Parsing Memory Corruption

/ FileName: JvmGifVulPoc.java Date: 2007-01-21 Description: Sun Microsystems Java GIF File Parsing Memory Corruption Vulnerability Prove Of Concept Exploit Environment: Only successfully tested on Sun Jre 1.5 Author: luoluo Contact: luoluonetathotmail.com || luoluonetat126.com ||...

indexu-xss.txt

vulnerability script indexu all versions Found by :SwEET-DeViL & viP HaCkEr & HaCkEr sUn TeaM AL-GaRNi Application : indexu version : all versions URL : http://www.nicecoder.com/ google : "Powered by INDEXU 5." Exploits : |//1\| in upgrade.php...

Design/Logic Flaw

Sun Solaris 9 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a variant of CVE-2002-0572...