jetlib.sec » Tags » java-virtual-machine

Feeds

133364 items (1 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities (1 unread)
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

19 items tagged "java virtual machine"

Related tags: red hat security [+], red [+], java runtime environment [+], hat [+], zero [+], security [+], oracle java [+], linux security [+], java implementation [+], java code execution [+], debian [+], code [+], browser policies [+], bridge results [+], bridge [+], authentication [+], advisory [+], virtual [+], security vulnerabilities [+], exploitation techniques [+], asia [+], york [+], usr [+], pre [+], paper [+], nxt [+], nsc [+], news [+], minimum memory [+], mindstorms [+], memory requirement [+], machine [+], lego mindstorms robot [+], josh [+], bin [+], android [+], america [+], Final [+], BackTrack [+], java [+]

• May 09, 2012
• 21:02

  Debian Security Advisory 2468-1

   » ‎ Packet Storm Security Advisories
  Debian Linux Security Advisory 2468-1 - It was discovered that Apache POI, a Java implementation of the Microsoft Office file formats, would allocate arbitrary amounts of memory when processing crafted documents. This could impact the stability of the Java virtual machine.

  Tags:  advisory debian security java-virtual-machine java-implementation linux-security  

• 21:02

  Debian Security Advisory 2468-1

   » ‎ Packet Storm Security Recent Files
  Debian Linux Security Advisory 2468-1 - It was discovered that Apache POI, a Java implementation of the Microsoft Office file formats, would allocate arbitrary amounts of memory when processing crafted documents. This could impact the stability of the Java virtual machine.

  Tags:  advisory debian security java-virtual-machine java-implementation linux-security  

• 21:02

  Debian Security Advisory 2468-1

   » ‎ Packet Storm Security Misc. Files
  Debian Linux Security Advisory 2468-1 - It was discovered that Apache POI, a Java implementation of the Microsoft Office file formats, would allocate arbitrary amounts of memory when processing crafted documents. This could impact the stability of the Java virtual machine.

  Tags:  advisory debian security java-virtual-machine java-implementation linux-security  

• February 21, 2012
• 18:10

  Red Hat Security Advisory 2012-0322-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2012-0322-01 - These packages provide the OpenJDK 6 Java Runtime Environment and the OpenJDK 6 Software Development Kit. It was discovered that Java2D did not properly check graphics rendering objects before passing them to the native renderer. Malicious input, or an untrusted Java application or applet could use this flaw to crash the Java Virtual Machine, or bypass Java sandbox restrictions. It was discovered that the exception thrown on deserialization failure did not always contain a proper identification of the cause of the failure. An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions.

  Tags:  java hat red java-runtime-environment red-hat-security java-virtual-machine  

• 18:10

  Red Hat Security Advisory 2012-0322-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2012-0322-01 - These packages provide the OpenJDK 6 Java Runtime Environment and the OpenJDK 6 Software Development Kit. It was discovered that Java2D did not properly check graphics rendering objects before passing them to the native renderer. Malicious input, or an untrusted Java application or applet could use this flaw to crash the Java Virtual Machine, or bypass Java sandbox restrictions. It was discovered that the exception thrown on deserialization failure did not always contain a proper identification of the cause of the failure. An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions.

  Tags:  java hat red java-runtime-environment red-hat-security java-virtual-machine  

• 18:10

  Red Hat Security Advisory 2012-0322-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2012-0322-01 - These packages provide the OpenJDK 6 Java Runtime Environment and the OpenJDK 6 Software Development Kit. It was discovered that Java2D did not properly check graphics rendering objects before passing them to the native renderer. Malicious input, or an untrusted Java application or applet could use this flaw to crash the Java Virtual Machine, or bypass Java sandbox restrictions. It was discovered that the exception thrown on deserialization failure did not always contain a proper identification of the cause of the failure. An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions.

  Tags:  java hat red java-runtime-environment red-hat-security java-virtual-machine  

• February 15, 2012
• 14:46

  Red Hat Security Advisory 2012-0135-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2012-0135-01 - These packages provide the OpenJDK 6 Java Runtime Environment and the OpenJDK 6 Software Development Kit. It was discovered that Java2D did not properly check graphics rendering objects before passing them to the native renderer. Malicious input, or an untrusted Java application or applet could use this flaw to crash the Java Virtual Machine, or bypass Java sandbox restrictions. It was discovered that the exception thrown on deserialization failure did not always contain a proper identification of the cause of the failure. An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions.

  Tags:  java hat red java-runtime-environment red-hat-security java-virtual-machine  

• 14:46

  Red Hat Security Advisory 2012-0135-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2012-0135-01 - These packages provide the OpenJDK 6 Java Runtime Environment and the OpenJDK 6 Software Development Kit. It was discovered that Java2D did not properly check graphics rendering objects before passing them to the native renderer. Malicious input, or an untrusted Java application or applet could use this flaw to crash the Java Virtual Machine, or bypass Java sandbox restrictions. It was discovered that the exception thrown on deserialization failure did not always contain a proper identification of the cause of the failure. An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions.

  Tags:  java hat red java-runtime-environment red-hat-security java-virtual-machine  

• 14:46

  Red Hat Security Advisory 2012-0135-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2012-0135-01 - These packages provide the OpenJDK 6 Java Runtime Environment and the OpenJDK 6 Software Development Kit. It was discovered that Java2D did not properly check graphics rendering objects before passing them to the native renderer. Malicious input, or an untrusted Java application or applet could use this flaw to crash the Java Virtual Machine, or bypass Java sandbox restrictions. It was discovered that the exception thrown on deserialization failure did not always contain a proper identification of the cause of the failure. An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions.

  Tags:  java hat red java-runtime-environment red-hat-security java-virtual-machine  

• November 13, 2011
• 21:52

  [Paper] Java and Java Virtual Machine Security Vulnerabilities and Their Exploitation Techniques

   » ‎ SecDocs
  Tags: Java
  Event: Black Hat Asia 2002
  

  Tags:  java virtual paper asia java-virtual-machine exploitation-techniques security-vulnerabilities  

• November 12, 2011
• 21:25

  [Slides] Java and Java Virtual Machine Security Vulnerabilities and Their Exploitation Techniques

   » ‎ SecDocs
  Tags: Java
  Event: Black Hat Asia 2002
  

  Tags:  java machine virtual asia java-virtual-machine exploitation-techniques security-vulnerabilities  

• April 05, 2011
• 17:58

  Zend Server Java Bridge Arbitrary Java Code Execution

   » ‎ Packet Storm Security Exploits
  This Metasploit module takes advantage of a trust relationship issue within the Zend Server Java Bridge. The Java Bridge is responsible for handling interactions between PHP and Java code within Zend Server. When Java code is encountered Zend Server communicates with the Java Bridge. The Java Bridge then handles the java code and creates the objects within the Java Virtual Machine. This interaction however, does not require any sort of authentication. This leaves the JVM wide open to remote attackers. Sending specially crafted data to the Java Bridge results in the execution of arbitrary java code.

  Tags:  java code bridge java-code-execution bridge-results java-virtual-machine  

• 17:58

  Zend Server Java Bridge Arbitrary Java Code Execution

   » ‎ Packet Storm Security Recent Files
  This Metasploit module takes advantage of a trust relationship issue within the Zend Server Java Bridge. The Java Bridge is responsible for handling interactions between PHP and Java code within Zend Server. When Java code is encountered Zend Server communicates with the Java Bridge. The Java Bridge then handles the java code and creates the objects within the Java Virtual Machine. This interaction however, does not require any sort of authentication. This leaves the JVM wide open to remote attackers. Sending specially crafted data to the Java Bridge results in the execution of arbitrary java code.

  Tags:  java code bridge java-code-execution bridge-results java-virtual-machine  

• 17:58

  Zend Server Java Bridge Arbitrary Java Code Execution

   » ‎ Packet Storm Security Misc. Files
  This Metasploit module takes advantage of a trust relationship issue within the Zend Server Java Bridge. The Java Bridge is responsible for handling interactions between PHP and Java code within Zend Server. When Java code is encountered Zend Server communicates with the Java Bridge. The Java Bridge then handles the java code and creates the objects within the Java Virtual Machine. This interaction however, does not require any sort of authentication. This leaves the JVM wide open to remote attackers. Sending specially crafted data to the Java Bridge results in the execution of arbitrary java code.

  Tags:  java code bridge java-code-execution bridge-results java-virtual-machine  

• February 15, 2011
• 4:55

  Zero Day Initiative Advisory 11-082

   » ‎ Packet Storm Security Advisories
  Zero Day Initiative Advisory 11-082 - This vulnerability allows remote attackers to leak authentication details on vulnerable installations of the Oracle Java Runtime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the handling of NTLM authentication requested generated in the context of the Java Runtime. The Java Virtual Machine will ignore browser policies and respond to WWW-Authenticate requests from the Internet zone resulting in the leakage of NTLM authentication hashes to attackers.

  Tags:  java zero authentication browser-policies java-virtual-machine oracle-java  

• 4:55

  Zero Day Initiative Advisory 11-082

   » ‎ Packet Storm Security Recent Files
  Zero Day Initiative Advisory 11-082 - This vulnerability allows remote attackers to leak authentication details on vulnerable installations of the Oracle Java Runtime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the handling of NTLM authentication requested generated in the context of the Java Runtime. The Java Virtual Machine will ignore browser policies and respond to WWW-Authenticate requests from the Internet zone resulting in the leakage of NTLM authentication hashes to attackers.

  Tags:  java zero authentication browser-policies java-virtual-machine oracle-java  

• 4:55

  Zero Day Initiative Advisory 11-082

   » ‎ Packet Storm Security Misc. Files
  Zero Day Initiative Advisory 11-082 - This vulnerability allows remote attackers to leak authentication details on vulnerable installations of the Oracle Java Runtime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the handling of NTLM authentication requested generated in the context of the Java Runtime. The Java Virtual Machine will ignore browser policies and respond to WWW-Authenticate requests from the Internet zone resulting in the leakage of NTLM authentication hashes to attackers.

  Tags:  java zero authentication browser-policies java-virtual-machine oracle-java  

• August 02, 2010
• 16:24

  Android controlling Mindstorms NXT

   » ‎ Hack a Day
  Here’s an Android device controlling a LEGO Mindstorms robot. [Josh] and a couple of his colleagues developed software to get both Android 2.1 (video above) and Android 1.6 (video) to work as Bluetooth control devices. The NXT cube is running leJOS, a Java virtual machine, allowing you to program Mindstorms using Java. Although their code is at an [...]

  Tags:  nxt mindstorms android josh lego-mindstorms-robot java-virtual-machine news  

• March 19, 2010
• 6:11

  bt 4 final nexpose not working

   » ‎ remote-exploit & backtrack
  hi all ,
  bt 4 final nexpose not working ..pls help me????
  
  
  root@bt:/opt/rapid7/nexpose/nsc# ./nsc.sh
  Checking for available jvms
  Validating jre in directory _jvm
  
  OS information
  ------------------------------------------------------------
  Current directory: /opt/rapid7/nexpose/nsc
  User name: root
  Computer name: bt
  Operating system: Ubuntu Linux 8.10
  Total memory: 250640 KBytes
  Available memory: 4044 KBytes
  CPU speed: 2333MHz
  Number of CPUs: 1
  Super user: true
  JVM started: Fri Mar 19 07:28:20 EDT 2010
  JVM uptime: 2 seconds
  Checking graphics environment...
  OK
  WARNING: Minimum memory requirement has not been met. Only 244MB is installed.
  PATH: /opt/kde3/bin:/opt/kde3/games:/usr/local/sbin:/usr/local/bin:/usr/sbin:/us
  r/bin:/sbin:/bin:/usr/games:/opt/oracle/instantclient_10_2:/opt/oracle/instantcl
  ient_10_2
  The Java virtual machine is exiting with code 0
  Using jre at _jvm
  WARNING: Minimum memory requirement has not been met. Only 244MB is installed.
  PATH: /opt/kde3/bin:/opt/kde3/games:/usr/local/sbin:/usr/local/bin:/usr/sbin:/us
  r/bin:/sbin:/bin:/usr/games:/opt/oracle/instantclient_10_2:/opt/oracle/instantcl
  ient_10_2
  Logging to file /opt/rapid7/nexpose/update.log
  Checking for available jvms
  Validating jre in directory _jvm
  
  OS information
  ------------------------------------------------------------
  Current directory: /opt/rapid7/nexpose/nsc
  User name: root
  Computer name: bt
  Operating system: Ubuntu Linux 8.10
  Total memory: 250640 KBytes
  Available memory: 5720 KBytes
  CPU speed: 2333MHz
  Number of CPUs: 1
  Super user: true
  JVM started: Fri Mar 19 07:28:24 EDT 2010
  JVM uptime: 1 second
  Checking graphics environment...
  OK
  WARNING: Minimum memory requirement has not been met. Only 244MB is installed.
  PATH: /opt/kde3/bin:/opt/kde3/games:/usr/local/sbin:/usr/local/bin:/usr/sbin:/us
  r/bin:/sbin:/bin:/usr/games:/opt/oracle/instantclient_10_2:/opt/oracle/instantcl
  ient_10_2
  The Java virtual machine is exiting with code 0
  Using jre at _jvm
  WARNING: Minimum memory requirement has not been met. Only 244MB is installed.
  PATH: /opt/kde3/bin:/opt/kde3/games:/usr/local/sbin:/usr/local/bin:/usr/sbin:/us
  r/bin:/sbin:/bin:/usr/games:/opt/oracle/instantclient_10_2:/opt/oracle/instantcl
  ient_10_2
  NSC 3/19/10 7:28 AM: Logging initialized (system time zone is America/Ne
  w_York)
  NSC 3/19/10 7:28 AM: initializing JDBC drivers
  NSC 3/19/10 7:28 AM: NeXpose is running interactively under super-user:
  root
  NSC 3/19/10 7:28 AM: WARNING: NeXpose running with insufficient free mem
  ory: 244MB total (3MB free)
  NSC 3/19/10 7:28 AM: System speed: 2333MHz (x1)
  Server 3/19/10 7:28 AM: Using license: r7lic23664.lic, expires: Tuesday, Fe
  bruary 2, 2100 12:00:00 AM GMT (r7lic23664.lic)
  NSC 3/19/10 7:28 AM: Custom SSL certificate not available. Using default
  NSC certificate for web server.
  httpd 3/19/10 7:28 AM: configuring web server...
  Api12Context3/19/10 7:28 AM: Searching for JAXB context classes
  httpd 3/19/10 7:28 AM: registering shutdown hook...
  httpd 3/19/10 7:28 AM: Generating skin: /opt/rapid7/nexpose/nsc/htroot/scr ipts/nexpose-skin.js
  httpd 3/19/10 7:28 AM: Generating feature set: /opt/rapid7/nexpose/nsc/htr oot/scripts/nexpose-features.js
  DaemonMgr 3/19/10 7:28 AM: Starting WebServer
  httpd 3/19/10 7:28 AM: bringing up SSL and initializing components...
  NSC 3/19/10 7:28 AM: Web server subsystem initialized
  Scheduler 3/19/10 7:28 AM: initializing...
  DaemonMgr 3/19/10 7:28 AM: Starting NexposeScheduler
  NSC 3/19/10 7:28 AM: Scheduler subsystem initialized
  NSC 3/19/10 7:28 AM: Initializing administrative alerters
  NSC 3/19/10 7:28 AM: initializing log rotation
  NSC 3/19/10 7:28 AM: Cleaning up temporary NeXpose files
  NSC 3/19/10 7:28 AM: Initializing update engine
  AU-88E704D253/19/10 7:28 AM: initializing update engine for 88E704D255EFD627455B D18D30A6EBA28ACF54B1...
  httpd 3/19/10 7:28 AM: NSC/0.6.4 (JVM) bound to port 3780 and running...
  AU-88E704D253/19/10 7:28 AM: Checking for approved updates...
  AU-88E704D253/19/10 7:28 AM: No approved updates found for processing
  AU-88E704D253/19/10 7:28 AM: Started auto-update...
  AU-88E704D253/19/10 7:28 AM: Establishing HTTP connection with updates.rapid7.co m via proxy (updates.rapid7.com:80)...
  AU-88E704D253/19/10 7:28 AM: Encountered an error closing update server connection: updates.rapid7.com
  NSC 3/19/10 7:28 AM: Failed to auto-update console: updates.rapid7.com
  NSC 3/19/10 7:28 AM: Initializing postgresql database manager for //127.0.0.1:5432/nexpose...
  postgresql 3/19/10 7:28 AM: Starting up postgresql DB system
  postgresql 3/19/10 7:28 AM: Nexpose PostgreSQL service status: 0
  postgresql 3/19/10 7:28 AM: Removed spurious postmaster.pid file
  postgresql 3/19/10 7:28 AM: Nexpose PostgreSQL service status: 0
  postgresql 3/19/10 7:28 AM: Nexpose PostgreSQL service status: 1
  postgresql 3/19/10 7:28 AM: Determining whether database nexpose exists
  NSC 3/19/10 7:28 AM: PostgreSQL 8.2.7 on i686-pc-linux-gnu, compiled by GCC gcc (GCC) 3.3.3 20040412 (Red Hat Linux 3.3.3-7)
  DBUpgrader 3/19/10 7:28 AM: DB_VERSION = 38
  DBUpgrader 3/19/10 7:28 AM: DB_REINDEX = 35
  DBUpgrader 3/19/10 7:28 AM: Verifying database version...
  DBUpgrader 3/19/10 7:28 AM: Installed DB VERSION = 38
  DBUpgrader 3/19/10 7:28 AM: Database version 38 is up to date.
  DBUpgrader 3/19/10 7:28 AM: Database does not require upgrading
  NSC 3/19/10 7:28 AM: Initializing datastore login module...
  NSC 3/19/10 7:28 AM: Synchronizing authentication sources...
  UserManager 3/19/10 7:28 AM: Synchronizing XML users with datastore...
  
  > NSC 3/19/10 7:29 AM: initializing extension manager from dir /opt/rapid7/nexpose/plugins
  ExtMgr 3/19/10 7:29 AM: initializing...
  ExtMgr 3/19/10 7:29 AM: Initialization successful.
  Nexpose 3/19/10 7:29 AM: loading extension ExtensionHandler/java
  vulndb 3/19/10 7:29 AM: Compiling vulnerability definitions. For first-time users, this could take several minutes.
  vulndb 3/19/10 7:37 AM: Failed to load linuxrpm-rhsa-2006-0191: java.lang.OutOfMemoryError: Java heap space
  vulndb 3/19/10 7:39 AM: Failed to load linuxrpm-rhsa-2009-1531: java.lang.O
  vulndb 3/19/10 7:40 AM: Failed to load linuxrpm-rhsa-2006-0190: java.lang.O
  #
  # An unexpected error has been detected by Java Runtime Environment:
  #
  # Internal Error (53484152454432554E54494D450E435050020F), pid=5938, tid=308449
  #
  # Java VM: Java HotSpot(TM) Server VM (1.6.0_02-b05 mixed mode)
  # An error report file with more information is saved as hs_err_pid5938.log
  #
  # If you would like to submit a bug report, please visit:
  # java(dot)sun(dot)com/webapps/bugreport/crash(dot)jsp]HotSpot Virtual Machine Error Reporting Page
  #
  The Java virtual machine has aborted.
  NeXpose security console exited with code 3
  
  
  thks

  Tags:  usr bin nsc york america minimum-memory memory-requirement java-virtual-machine BackTrack pre Final