[SA22910] Sun Java JRE Swing Library Applet Security Bypass

TITLE: Sun Java JRE Swing Library Applet Security Bypass SECUNIA ADVISORY ID: SA22910 VERIFY ADVISORY: http://secunia.com/advisories/22910/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: Sun Java JRE 1.5.x / 5.x http://secunia.com/product/4228/ Sun Java JDK 1.5...

Sun Java运行时环境信息泄露漏洞

Sun的Java运行时环境（JRE）为JAVA应用程序提供可靠的运行环境。 Sun Java运行时环境Swing库中存在安全漏洞，可能允许不可信任的Applet访问其他Applet中的数据。 Sun J2SE = 5.0 Update 7 Sun --- Sun已经为此发布了一个安全公告（Sun-Alert-102622）以及相应补丁: Sun-Alert-102622：A Security Vulnerability in the Java Runtime Environment Swing Library may Allow an Untrusted Applet to Access...

sunForumXSS.txt

Sun, in their amazing patheticness, have again allowed direct HTML to be written into their forum system. URL: http://forum.java.sun.com/forum.jspa?forumID=553 It works on only select forums, but due to severe incompetence from the administrators of the site, this issue will occur quit often. It ...

X.Org LibX11 XKEYBOARD扩展本地溢出漏洞

X.Org是X.Org Foundation对X窗口系统的开源实现。 X11R6 X窗口系统库的字符控制函数中存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 如果将XKBCHARSET环境变量设置为很长的字符串并将DISPLAY环境变量设置为启用了XKEYBOARD扩展的X窗口系统服务器的话，则调用动态连接库时就会触发这个漏洞，导致执行任意指令。 X11R6.4中有漏洞的函数： static int if NeedFunctionPrototypes Strcmpchar str1, char str2 else Strcmpstr1, str2 char str1...

Sun Solaris 10 UFS本地拒绝服务漏洞

Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris的文件系统实现在挂接恶意的分区时存在漏洞，攻击者可能利用此漏洞导致服务器崩溃。 Solaris没有正确地处理UFS文件系统中被破坏的数据结构，允许攻击者通过诱骗用户加载特制的文件系统镜像导致系统崩溃，或破坏文件系统。 Sun Solaris 10.0 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://sunsolve.sun.com/security...

Sun-One Application Server Version Detection

Binary data 3809.prm...

Solaris 5.6 (sparc) : 106758-02

PPP 3.0.1: license lock, messages enUS locale, /etc. Date this patch was last updated by Sun : Jan/19/01 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. ...

Solaris 2.6 (sparc) : 106754-01

The remote host is missing Sun Security Patch number 106754-01 Sun WebServer 1.0: Security and Performance Patch. Date this patch was last updated by Sun : Wed Dec 06 05:51:19 MST 2000 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script ha...

Solaris 2.6 (sparc) : 104829-02

The remote host is missing Sun Security Patch number 104829-02 FLEXlm 4.1c: Patch for FLEXlm 4.1c and lit/littty. Date this patch was last updated by Sun : Thu Dec 23 17:00:00 MST 1999 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script ha...

Solaris 2.5.1 (i386) : 106872-18

The remote host is missing Sun Security Patch number 106872-18 DMI, See Problem Description. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix...

Solaris 2.6 (sparc) : 110004-02

The remote host is missing Sun Security Patch number 110004-02 Patch-ID 110004-02. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on...

Solaris 2.6 (i386) : 106719-01

The remote host is missing Sun Security Patch number 106719-01 SunScreen SKIP for Solaris 1.1.1: x86 patch for /etc mode in packaging. Date this patch was last updated by Sun : Wed Sep 09 18:00:00 MDT 1998 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999...

Solaris 8 (sparc) : 104018-11

The remote host is missing Sun Security Patch number 104018-11 Solstice Site/SunNet/Domain Manager 2.3 Rev B: jumbo patch. Date this patch was last updated by Sun : Thu Jul 22 03:32:11 MDT 2004 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This...

Solaris 5.9 (sparc) : 112481-15

SMS 1.2: fomd, hwad, esmd, pcd patch. Date this patch was last updated by Sun : Dec/01/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 5.8 (sparc) : 117492-01

Sun Ray Data Store version 1.0 Patch Update. Date this patch was last updated by Sun : Jul/02/04 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 2.6 (i386) : 110537-01

The remote host is missing Sun Security Patch number 110537-01 AnswerBook 1.4.2x86: HTTP GET overflow allows code execution. Date this patch was last updated by Sun : Wed Nov 23 04:35:55 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ Thi...

Solaris 2.5.1 (i386) : 105272-13

The remote host is missing Sun Security Patch number 105272-13 Sun Directory Services 1.0x86: Patch. Date this patch was last updated by Sun : Wed Dec 15 17:00:00 MST 1999 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...

Solaris 5.7 (sparc) : 107997-18

Sun Cluster 2.2: HA-Oracle Patch. Date this patch was last updated by Sun : Feb/18/04 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 2.5.1 (i386) : 104555-02

The remote host is missing Sun Security Patch number 104555-02 Solstice Security Manager SSM 4.3: sundry patch. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended...

Solaris 2.6 (i386) : 105650-01

The remote host is missing Sun Security Patch number 105650-01 Solstice FireWall-1 3.0: x86 Patch VPN+DES. Date this patch was last updated by Sun : Sun Dec 07 17:00:00 MST 1997 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...