jetlib.sec » Tags » sun-microsystems

Feeds

133445 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

19 items tagged "sun microsystems"

Related tags: vulnerability [+], service [+], directory service manager [+], directory [+], txt [+], sunscreen [+], shell [+], server [+], remote exploit [+], manager. authentication [+], java system [+], firewall [+], twsl [+], sun directory [+], spiderlabs [+], service vulnerability [+], server authentication [+], mojarra [+], microsystems [+], ldap query [+], application [+], apache myfaces [+], system [+], site [+], safer use [+], null pointer [+], java [+], exploits [+], dsml [+], dos vulnerability [+], denial of service [+], cross [+], code execution [+], code [+], sun [+]

• February 06, 2012
• 4:12

  Sun Microsystems Cross Site Scripting

   » ‎ Packet Storm Security Exploits
  Sun Microsystems suffers from a cross site scripting vulnerability.

  Tags:  cross sun site sun-microsystems vulnerability  

• January 24, 2011
• 11:22

  Sun Microsystems SunScreen Firewall Root Exploit

   » ‎ Packet Storm Security Exploits
  Sun Microsystems SunScreen Firewall local root exploit that spawns a shell on tcp port 1524.

  Tags:  sun sunscreen firewall sun-microsystems shell  

• 11:22

  Sun Microsystems SunScreen Firewall Root Exploit

   » ‎ Packet Storm Security Recent Files
  Sun Microsystems SunScreen Firewall local root exploit that spawns a shell on tcp port 1524.

  Tags:  sun sunscreen firewall sun-microsystems shell  

• 11:22

  Sun Microsystems SunScreen Firewall Root Exploit

   » ‎ Packet Storm Security Misc. Files
  Sun Microsystems SunScreen Firewall local root exploit that spawns a shell on tcp port 1524.

  Tags:  sun sunscreen firewall sun-microsystems shell  

• January 13, 2011
• 14:00

  [remote exploits] - Sun Microsystems SunScreen Firewall Root Exploit

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [remote exploits] - Sun Microsystems SunScreen Firewall Root Exploit

  Tags:  sun exploits microsystems sun-microsystems  

• June 20, 2010
• 19:57

  Sun Microsystems Directory Server Enterprise DSML UTF-8 DoS Vulnerability

   » ‎ SecuriTeam
  This vulnerability allows attackers to deny services on vulnerable installations of Sun Microsystems Directory Server.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  server directory sun dos-vulnerability sun-microsystems safer-use  

• June 17, 2010
• 21:57

  Sun Microsystems Directory Server Enterprise ASN.1 Parsing Remote Code Execution Vulnerability

   » ‎ SecuriTeam
  This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Sun Microsystems Directory Service Manager.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  directory code sun directory-service-manager sun-microsystems code-execution  

• April 14, 2010
• 11:00

  Bugtraq: ZDI-10-075: Sun Microsystems Directory Server Enterprise DSML UTF-8 Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ZDI-10-075: Sun Microsystems Directory Server Enterprise DSML UTF-8 Denial of Service Vulnerability

  Tags:  server directory sun service-vulnerability denial-of-service sun-microsystems  

• 11:00

  Bugtraq: ZDI-10-073: Sun Microsystems Directory Server DSML-over-HTTP Username Search Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ZDI-10-073: Sun Microsystems Directory Server DSML-over-HTTP Username Search Denial of Service Vulnerability

  Tags:  server directory sun service-vulnerability sun-microsystems dsml  

• 1:00

  ZDI-10-074.txt

   » ‎ Packet Storm Security Recent Files
  Zero Day Initiative Advisory 10-074 - This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Sun Microsystems Directory Service Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within Sun Directory Server's LDAP implementation and can be triggered via a malformed LDAP query to the service. When the service decodes the malformed query, the application will cause a buffer overflow which can lead to code execution under the context of the service.

  Tags:  vulnerability service sun manager.-authentication directory-service-manager ldap-query sun-microsystems  

• 1:00

  ZDI-10-075.txt

   » ‎ Packet Storm Security Recent Files
  Zero Day Initiative Advisory 10-075 - This vulnerability allows attackers to deny services on vulnerable installations of Sun Microsystems Directory Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within Sun Directory Server's DSML-over-HTTP implementation and can be triggered via an HTTP POST request to the webserver that the application has bound to. When the service processes an XML request containing specific UTF-8 characters, an underlying library will raise an exception that is uncaught by the application. Due to the exception being uncaught, the application will then terminate which will cause future requests made against the service to fail. This will lead to a denial of service against the affected application.

  Tags:  vulnerability service application server-authentication sun-directory sun-microsystems  

• 1:00

  ZDI-10-073.txt

   » ‎ Packet Storm Security Advisories
  Zero Day Initiative Advisory 10-073 - This vulnerability allows attackers to deny services on vulnerable installations of Sun Microsystems Directory Service Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within Sun Directory Server's DSML-over-HTTP implementation and can be triggered via an HTTP POST request to the webserver that the application has bound to. When the service processes a search request with a malformed username, the application will dereference a null pointer causing any future queries made against the webserver to fail. This will lead to a denial of service against the affected service.

  Tags:  vulnerability sun service manager.-authentication directory-service-manager sun-microsystems null-pointer  

• 1:00

  ZDI-10-074.txt

   » ‎ Packet Storm Security Advisories
  Zero Day Initiative Advisory 10-074 - This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Sun Microsystems Directory Service Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within Sun Directory Server's LDAP implementation and can be triggered via a malformed LDAP query to the service. When the service decodes the malformed query, the application will cause a buffer overflow which can lead to code execution under the context of the service.

  Tags:  vulnerability service sun manager.-authentication directory-service-manager ldap-query sun-microsystems  

• 1:00

  ZDI-10-075.txt

   » ‎ Packet Storm Security Advisories
  Zero Day Initiative Advisory 10-075 - This vulnerability allows attackers to deny services on vulnerable installations of Sun Microsystems Directory Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within Sun Directory Server's DSML-over-HTTP implementation and can be triggered via an HTTP POST request to the webserver that the application has bound to. When the service processes an XML request containing specific UTF-8 characters, an underlying library will raise an exception that is uncaught by the application. Due to the exception being uncaught, the application will then terminate which will cause future requests made against the service to fail. This will lead to a denial of service against the affected application.

  Tags:  vulnerability service application server-authentication sun-directory sun-microsystems  

• April 03, 2010
• 13:31

  sunjavasystem-exec.txt

   » ‎ Packet Storm Security Recent Files
  Sun Microsystems Sun Java System Web Server remote exploit for Sparc. Binds a shell to port 5555.

  Tags:  java txt sun remote-exploit sun-microsystems java-system  

• 13:30

  sunjavasystem-exec.txt

   » ‎ Packet Storm Security Exploits
  Sun Microsystems Sun Java System Web Server remote exploit for Sparc. Binds a shell to port 5555.

  Tags:  remote-exploit sun-microsystems java-system  

• 1:00

  Sun Microsystems Sun Java System Web Server remote exploit

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  Sun Microsystems Sun Java System Web Server remote exploit

  Tags:  system sun microsystems remote-exploit sun-microsystems java-system  

• February 09, 2010
• 19:00

  TWSL2010-001.txt

   » ‎ Packet Storm Security Recent Files
  SpiderLabs has documented view state tampering vulnerabilities in three products from separate vendors. Microsoft ASP.Net version 3.5, Apache MyFaces versions 1.2.8 and 1.2.7, and Sun Microsystems Mojarra versions 1.2_14 and 2.0.2 are all vulnerable.

  Tags:  txt spiderlabs twsl apache-myfaces sun-microsystems mojarra  

• 19:00

  TWSL2010-001.txt

   » ‎ Packet Storm Security Exploits
  SpiderLabs has documented view state tampering vulnerabilities in three products from separate vendors. Microsoft ASP.Net version 3.5, Apache MyFaces versions 1.2.8 and 1.2.7, and Sun Microsystems Mojarra versions 1.2_14 and 2.0.2 are all vulnerable.

  Tags:  txt spiderlabs twsl apache-myfaces sun-microsystems mojarra