Sun Solaris tcsh(1) contains vulnerability in the built-in ls-F command

Overview Sun Solaris tcsh1 contains a vulnerability in the built-in ls-F command that could allow an unprivileged user to create or remove files or gain privileges of another user. Description A vulnerability in the built-in ls-F command of the Sun Solaris tcsh1 may allow an intruder to create or...

CVE-2003-1134

Sun Java 1.3.1, 1.4.1, and 1.4.2 allows local users to cause a denial of service JVM crash, possibly by calling the ClassDepth function with a null parameter, which causes a crash instead of generating a null pointer exception...

CVE-2003-1301

Sun Java Runtime Environment JRE 1.x before 1.4.211 and 1.5.x before 1.5.006, and as used in multiple web browsers, allows remote attackers to cause a denial of service application crash via deeply nested object arrays, which are not properly handled by the garbage collector and trigger invalid...

CVE-2003-1521

Sun Java Plug-In 1.4 through 1.4.202 allows remote attackers to repeatedly access the floppy drive via the createXmlDocument method in the org.apache.crimson.tree.XmlDocument class, which violates the Java security model...

CVE-2003-1124

Unknown vulnerability in Sun Management Center SunMC 2.1.1, 3.0, and 3.0 Revenue Release RR, when installed and run by root, allows local users to create or modify arbitrary files...

CVE-2003-1563

Sun Cluster 2.2 through 3.2 for Oracle Parallel Server / Real Application Clusters OPS/RAC allows local users to cause a denial of service cluster node panic or abort by launching a daemon listening on a TCP port that would otherwise be used by the Distributed Lock Manager DLM, possibly involving...

CVE-2003-1125

Unknown vulnerability in ns-ldapd for Sun ONE Directory Server 4.16, 5.0, and 5.1 allows LDAP clients to cause a denial of service service halt...

CVE-2003-0970

The Network Management Port on Sun Fire B1600 systems allows remote attackers to cause a denial of service packet loss via ARP packets, which cause all ports to become temporarily disabled...

CVE-2003-1056

The ed editor for Sun Solaris 2.6, 7, and 8 allows local users to create or overwrite arbitrary files via a symlink attack on temporary files...

CVE-2003-1057

Unknown vulnerability in CDE Print Viewer dtprintinfo for Sun Solaris 2.6 through 9 may allow local users to execute arbitrary code...

CVE-2003-1058

The Xsun server for Sun Solaris 2.6 through 9, when running in Direct Graphics Access DGA mode, allows local users to cause a denial of service Xsun crash or to create or overwrite arbitrary files on the system, probably via a symlink attack on temporary server files...

CVE-2003-0970

The Network Management Port on Sun Fire B1600 systems allows remote attackers to cause a denial of service packet loss via ARP packets, which cause all ports to become temporarily disabled...

CVE-2003-0970

The CVE-2003-0970 issue affects Sun Fire B1600 systems via the Network Management Port. Remote ARP packets can cause all ports to temporarily disable, resulting in packet loss (partial availability impact). Affected component: Network Management Port on Sun Fire B1600. Root cause: ARP-based denia...

Sun Microsystems Java Virtual Machine 1.x - Security Manager Denial of Service

Sun Microsystems Java Virtual Machine 1.x - Security Manager Denial of Service source: https://www.securityfocus.com/bid/8892/info A problem has been reported in the Sun Microsystems Java Virtual Machine that occurs when implementing the Security Manager. Because of this, an attacker may be able ...

Sun Microsystems Java Virtual Machine 1.x - Security Manager Denial of Service

source: https://www.securityfocus.com/bid/8892/info A problem has been reported in the Sun Microsystems Java Virtual Machine that occurs when implementing the Security Manager. Because of this, an attacker may be able to crash the virtual machine. / InsecurityManager-Demonstration / / coded by Ma...

CVE-2003-0896

The CVE-2003-0896 entry concerns the loadClass method of sun.applet.AppletClassLoader in the JVM used with Sun SDK/JRE 1.4.1_03 and earlier. A remote attacker can bypass sandbox restrictions and execute arbitrary code by loading a class name that uses "/" instead of "." (dot), which avoids the Se...

SUN jdk crossite scripting

jdk undocumented static variable may allow data exchange between sites...

[LSD] Security vulnerability in SUN's Java Virtual Machine implementation

Hello, We have found a security vulnerability in the SUN's implementation of the Java Virtual Machine, which affects the following SDK and JRE releases: - SDK and JRE 1.4.103 and earlier - SDK and JRE 1.3.108 and earlier - SDK and JRE 1.2.2015 and earlier. SUN was informed about this issue on Jun...

Sun Management Center 3.03.5 - Error Message Information Disclosure

Sun Management Center 3.03.5 - Error Message Information Disclosure source: https://www.securityfocus.com/bid/8873/info A problem in the handling of error messages has been identified in Sun Management Center. Because of this, an attacker may be able to gain sensitive information about vulnerable...

Sun Java Virtual Machine 1.x - Slash Path Security Model Circumvention

Sun Java Virtual Machine 1.x - Slash Path Security Model Circumvention source: https://www.securityfocus.com/bid/8879/info A vulnerability has been identified in the Sun Java Virtual Machine packaged with JRE and SDK. This issue results in the circumvention of the Java Security Model, and can...