CVE-2006-6736

CVE-2006-6736 affects Sun JDK/JRE 5.0 Update 6 and earlier, J2SDK/JRE 1.4.2_12 and earlier 1.4.x, and JDK/JRE 1.3.1_18 and earlier. The vulnerability allows an untrusted applet to access data in other applets (two issues). The connected advisories reference fixes in IBM/Sun Java updates and list ...

CVE-2006-6731

Multiple buffer overflows in Sun Java Development Kit JDK and Java Runtime Environment JRE 5.0 Update 7 and earlier, Java System Development Kit SDK and JRE 1.4.212 and earlier 1.4.x versions, and SDK and JRE 1.3.118 and earlier allow attackers to develop Java applets that read, write, or execute...

CVE-2006-6745

CVE-2006-6745 describes serialization-related flaws in Sun JDK/JRE 5.0 Update 7 and earlier, and Java SDK/JRE 1.4.2_12 and earlier 1.4.x, that could allow an untrusted Java applet or application to gain privileges. The connected advisories confirm these issues affect multiple IBM Java runtimes as...

CVE-2006-6737

CVE-2006-6737 affects Sun JDK/JRE 5.0 Update 5 and earlier, J2SDK/JRE 1.4.2_10 and earlier (1.4.x), and JRE/JDK 1.3.1_18 and earlier. The issue allows an untrusted applet to access data in other applets (cross-applet data access). Red Hat and SUSE/OpenVAS entries confirm IBM/Java updates mitigate...

CVE-2006-6736

Unspecified vulnerability in Sun Java Development Kit JDK and Java Runtime Environment JRE 5.0 Update 6 and earlier, Java System Development Kit SDK and JRE 1.4.212 and earlier 1.4.x versions, and SDK and JRE 1.3.118 and earlier allows attackers to use untrusted applets to "access data in other...

CVE-2006-6745

Multiple unspecified vulnerabilities in Sun Java Development Kit JDK and Java Runtime Environment JRE 5.0 Update 7 and earlier, and Java System Development Kit SDK and JRE 1.4.212 and earlier 1.4.x versions, allow attackers to develop Java applets or applications that are able to gain privileges,...

CVE-2006-6737

Unspecified vulnerability in Sun Java Development Kit JDK and Java Runtime Environment JRE 5.0 Update 5 and earlier, Java System Development Kit SDK and JRE 1.4.210 and earlier 1.4.x versions, and SDK and JRE 1.3.118 and earlier allows attackers to use untrusted applets to "access data in other...

Sun Solaris Syslog本地拒绝服务漏洞

Sun Solaris是一款商业性质的操作系统。 Sun Solaris存在设计错误，本地攻击者可以利用漏洞关闭syslog3c功能，导致消息不能记录。 Sun Solaris 10.0 x86 Sun Solaris 10.0 Sun Solaris 9.0 x86 Sun Solaris 9.0 Sun Solaris 8.0 x86 Sun Solaris 8.0 un Solaris 10.0 Sun Sun Patch ID: 118833-19...

[SA23445] Sun Java JRE Multiple Vulnerabilities

TITLE: Sun Java JRE Multiple Vulnerabilities SECUNIA ADVISORY ID: SA23445 VERIFY ADVISORY: http://secunia.com/advisories/23445/ CRITICAL: Highly critical IMPACT: Privilege escalation, System access WHERE: From remote SOFTWARE: Sun Java JDK 1.5.x http://secunia.com/product/4621/ Sun Java JRE 1.5.x...

Sun Java运行时环境多个远程权限提升漏洞

Sun的Java运行时环境（JRE）为JAVA应用程序提供可靠的运行环境。 Java运行时环境中存在两个序列化相关的漏洞，可能允许不可信任的Applet或应用程序提升权限。 Sun JRE = 5.0 Update 7 Sun SDK = 1.4.212 Sun已经为此发布了一个安全公告（Sun-Alert-102731）以及相应补丁: Sun-Alert-102731：Security Vulnerabilities Related to Serialization in the Java Runtime Environment may Allow Untrusted Applets ...

[SA23398] Sun Java JRE Applet Security Bypass

TITLE: Sun Java JRE Applet Security Bypass SECUNIA ADVISORY ID: SA23398 VERIFY ADVISORY: http://secunia.com/advisories/23398/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: Sun Java JDK 1.5.x http://secunia.com/product/4621/ Sun Java JRE 1.5.x / 5.x...

Solaris 2.6 (sparc) : 111685-24

The remote host is missing Sun Security Patch number 111685-24 C++ 5.3: Patch for Forte Developer 6 update 2 C++ compiler. Date this patch was last updated by Sun : Fri Dec 08 02:30:53 MST 2006 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This...

Solaris 10 (x86) : 124209-01

SunOS 5.10x86: Trusted Extensions header. Date this patch was last updated by Sun : Dec/07/06 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 10 (i386) : 124721-02

The remote host is missing Sun Security Patch number 124721-02 Sun Cluster 3.0/3.1/3.1x86: HA-PostgreSQL patch. Date this patch was last updated by Sun : Tue Jun 26 06:01:23 MDT 2007 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 @DEPRECATED@ This script has...

Solaris 9 (i386) : 124721-02

The remote host is missing Sun Security Patch number 124721-02 Sun Cluster 3.0/3.1/3.1x86: HA-PostgreSQL patch. Date this patch was last updated by Sun : Tue Jun 26 06:01:23 MDT 2007 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has...

iDefense Security Advisory 12.12.06: Sun Microsystems Solaris ld.so 'doprf()' Buffer Overflow Vulnerability

Sun Microsystems Solaris ld.so 'doprf' Buffer Overflow Vulnerability iDefense Security Advisory 12.12.06 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 12, 2006 I. BACKGROUND Solaris is a UNIX operating system developed by Sun Microsystems. More information can be found at...

Multiple Sun Solaris vulnerabilities

Buffer overflow in ld.so doprf, directory traversal on parsing different environment variables in ld.so...

CVE-2006-6494

Directory traversal vulnerability in ld.so.1 in Sun Solaris 8, 9, and 10 allows local users to execute arbitrary code via a .. dot dot sequence in the LANG environment variable that points to a locale file containing attacker-controlled format string specifiers...

CVE-2006-6494

CVE-2006-6494 affects Sun Solaris 8, 9, and 10 where ld.so.1 is vulnerable to a directory traversal via a dot-dot sequence in the LANG environment variable that points to a locale file containing attacker-controlled format string specifiers. According to the provided records, this allows a local ...

CVE-2006-6495

Stack-based buffer overflow in ld.so.1 in Sun Solaris 8, 9, and 10 allows local users to execute arbitrary code via large precision padding values in a format string specifier in the format parameter of the doprf function. NOTE: this issue normally does not cross privilege boundaries, except in...