SUN : Security Vulnerabilities (Gain Information)

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : Cve Number Descending Cve Number Ascending CVSS Score Descending Number Of Exploits Descending

Copy Results Download Results Select Table

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2009-4295	310	+Info	2009-12-11	2009-12-14	7.8	None	Remote	Low	Not required	Complete	None	None
Sun Ray Server Software 4.0 and 4.1 does not generate a unique DSA private key for the firmware on each Sun Ray 1, 1g, 100, and 150 DTU device, which makes it easier for remote attackers to obtain sensitive information by predicting a key and then using it to decrypt sniffed network traffic.
2	CVE-2009-3883	200	+Info	2009-11-09	2010-08-21	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Multiple unspecified vulnerabilities in the Windows Pluggable Look and Feel (PL&F) feature in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack vectors, related to "information leaks in mutable variables," aka Bug Id 6657138.
3	CVE-2009-3882	200	+Info	2009-11-09	2010-08-21	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Multiple unspecified vulnerabilities in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack vectors, related to "information leaks in mutable variables," aka Bug Id 6657026.
4	CVE-2009-3881	200	+Priv +Info	2009-11-09	2010-08-21	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not prevent the existence of children of a resurrected ClassLoader, which allows remote attackers to gain privileges via unspecified vectors, related to an "information leak vulnerability," aka Bug Id 6636650.
5	CVE-2009-3880	264	+Info	2009-11-09	2010-08-21	5.0	None	Remote	Low	Not required	Partial	None	None
The Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not properly restrict the objects that may be sent to loggers, which allows attackers to obtain sensitive information via vectors related to the implementation of Component, KeyboardFocusManager, and DefaultKeyboardFocusManager, aka Bug Id 6664512.
6	CVE-2009-3746	16	+Info	2009-10-22	2010-08-21	1.9	None	Local	Medium	Not required	Partial	None	None
XScreenSaver in Sun Solaris 10, when the accessibility feature is enabled, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, a different vulnerability than CVE-2009-1276 and CVE-2009-2711.
7	CVE-2009-2856	200	+Info	2009-08-18	2009-08-21	3.5	None	Remote	Medium	Single system	Partial	None	None
Sun Virtual Desktop Infrastructure (VDI) 3.0, when anonymous binding is enabled, does not properly handle a client's attempt to establish an authenticated and encrypted connection, which might allow remote attackers to read cleartext VDI configuration-data requests by sniffing LDAP sessions on the network.
8	CVE-2009-2713		+Info	2009-08-07	2009-08-15	4.3	None	Remote	Medium	Not required	Partial	None	None
The CDCServlet component in Sun Java System Access Manager 7.0 2005Q4 and 7.1, when Cross Domain Single Sign On (CDSSO) is enabled, does not ensure that "policy advice" is presented to the correct client, which allows remote attackers to obtain sensitive information via unspecified vectors.
9	CVE-2009-2711	200	+Info	2009-08-07	2010-08-21	4.9	None	Local	Low	Not required	Complete	None	None
XScreenSaver in Sun Solaris 9 and 10, OpenSolaris before snv_120, and X11 6.4.1 for Solaris 8, when the Xorg or Xnewt server is used, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, a different vulnerability than CVE-2009-1276.
10	CVE-2009-2690	264	+Info	2009-08-10	2010-08-21	5.0	None	Remote	Low	Not required	Partial	None	None
The encoder in Sun Java SE 6 before Update 15, and OpenJDK, grants read access to private variables with unspecified names, which allows context-dependent attackers to obtain sensitive information via an untrusted (1) applet or (2) application.
11	CVE-2009-2670	264	+Info	2009-08-05	2012-10-22	5.0	None	Remote	Low	Not required	Partial	None	None
The audio system in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to java.lang.System properties by (1) untrusted applets and (2) Java Web Start applications, which allows context-dependent attackers to obtain sensitive information by reading these properties.
12	CVE-2009-2475	200	+Info	2009-08-10	2010-08-21	7.8	None	Remote	Low	Not required	Complete	None	None
Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain sensitive information via vectors involving static variables that are declared without the final keyword, related to (1) LayoutQueue, (2) Cursor.predefined, (3) AccessibleResourceBundle.getContents, (4) ImageReaderSpi.STANDARD_INPUT_TYPE, (5) ImageWriterSpi.STANDARD_OUTPUT_TYPE, (6) the imageio plugins, (7) DnsContext.debug, (8) RmfFileReader/StandardMidiFileWriter.types, (9) AbstractSaslImpl.logger, (10) Synth.Region.uiToRegionMap/lowerCaseNameMap, (11) the Introspector class and a cache of BeanInfo, and (12) JAX-WS, a different vulnerability than CVE-2009-2673.
13	CVE-2009-2445	200	+Info	2009-07-13	2011-08-29	5.0	None	Remote	Low	Not required	Partial	None	None
Oracle iPlanet Web Server (formerly Sun Java System Web Server or Sun ONE Web Server) 6.1 before SP12, and 7.0 through Update 6, when running on Windows, allows remote attackers to read arbitrary JSP files via an alternate data stream syntax, as demonstrated by a .jsp::$DATA URI.
14	CVE-2009-2031	200	+Info	2009-06-11	2009-06-19	2.1	None	Local	Low	Not required	Partial	None	None
smbfs in Sun OpenSolaris snv_84 through snv_110, when default mount permissions are used, allows local users to read arbitrary files, and list arbitrary directories, on CIFS volumes.
15	CVE-2009-1276	200	+Info	2009-04-09	2009-08-11	2.1	None	Local	Low	Not required	Partial	None	None
XScreenSaver in Sun Solaris 10 and OpenSolaris before snv_109, and Solaris 8 and 9 with GNOME 2.0 or 2.0.2, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, as demonstrated by Thunderbird new-mail notifications.
16	CVE-2009-1076	200	+Info	2009-03-25	2009-03-25	5.0	None	Remote	Low	Not required	Partial	None	None
Sun Java System Identity Manager (IdM) 7.0 through 8.0 responds differently to failed use of the end-user question-based login feature depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.
17	CVE-2009-1074	310	+Info	2009-03-25	2009-10-06	5.0	None	Remote	Low	Not required	Partial	None	None
Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not use SSL in all expected circumstances, which makes it easier for remote attackers to obtain sensitive information by sniffing the network, related to "ssl termination devices" and lack of support for relative URLs.
18	CVE-2009-0348	200	+Info	2009-01-29	2009-05-07	5.0	None	Remote	Low	Not required	Partial	None	None
The login module in Sun Java System Access Manager 6 2005Q1 (aka 6.3), 7 2005Q4 (aka 7.0), and 7.1 responds differently to a failed login attempt depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.
19	CVE-2009-0278	200	+Info	2009-01-26	2009-02-05	5.0	None	Remote	Low	Not required	Partial	None	None
Sun Java System Application Server (AS) 8.1 and 8.2 allows remote attackers to read the Web Application configuration files in the (1) WEB-INF or (2) META-INF directory via a malformed request.
20	CVE-2008-5699	264	+Priv +Info	2008-12-22	2009-01-06	4.6	User	Local	Low	Not required	Partial	Partial	Partial
The name service cache daemon (nscd) in Sun Solaris 10 and OpenSolaris snv_50 through snv_104 does not properly check permissions, which allows local users to gain privileges and obtain sensitive information via unspecified vectors.
21	CVE-2008-5423	200	+Info	2008-12-11	2009-05-14	4.3	None	Local	Low	Single system	Partial	Partial	Partial
Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows Connector 1.1 and 2.0 expose the LDAP password during a configuration step, which allows local users to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vectors related to the utconfig component of the Server Software and the uttscadm component of the Windows Connector.
22	CVE-2008-5350	200	+Info	2008-12-05	2010-08-21	5.0	None	Remote	Low	Not required	Partial	None	None
Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted applications and applets to list the contents of the operating user's directory via unknown vectors.
23	CVE-2008-5346	200	+Info	2008-12-05	2010-08-21	7.1	None	Remote	Medium	Not required	Complete	None	None
Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file.
24	CVE-2008-5342	200	+Info	2008-12-05	2010-08-21	5.0	None	Remote	Low	Not required	Partial	None	None
Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted downloaded applications to cause local files to be displayed in the browser of the user of the untrusted application via unknown vectors, aka 6767668.
25	CVE-2008-5341	200	+Info	2008-12-05	2010-08-21	5.0	None	Remote	Low	Not required	Partial	None	None
Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors, aka CR 6727071.
26	CVE-2008-5099	200	+Priv Bypass +Info	2008-11-17	2009-08-12	4.6	User	Local	Low	Not required	Partial	Partial	Partial
Sun Logical Domain Manager (aka LDoms Manager or ldm) 1.0 through 1.0.3 displays the value of the OpenBoot PROM (OBP) security-password variable in cleartext, which allows local users to bypass the SPARC firmware's password protection, and gain privileges or obtain data access, via the "ldm ls -l" command, a different vulnerability than CVE-2008-4992.
27	CVE-2008-4747	200	+Info	2008-10-27	2008-11-15	2.1	None	Local	Low	Not required	Partial	None	None
Unspecified vulnerability in the search feature in Sun Java System LDAP JDK before 4.20 allows context-dependent attackers to obtain sensitive information via unknown attack vectors related to the LDAP JDK library.
28	CVE-2008-3114	200	+Info	2008-07-09	2012-10-29	5.0	None	Remote	Low	Not required	Partial	None	None
Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows context-dependent attackers to obtain sensitive information (the cache location) via an untrusted application, aka CR 6704074.
29	CVE-2008-3110	264	+Info	2008-07-09	2010-08-21	4.3	None	Remote	Medium	Not required	Partial	None	None
Unspecified vulnerability in scripting language support in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows remote attackers to obtain sensitive information by using an applet to read information from another applet.
30	CVE-2008-2120	200	+Info	2008-05-09	2009-04-01	5.0	None	Remote	Low	Not required	Partial	None	None
Unspecified vulnerability in Sun Java System Application Server 7 2004Q2 before Update 6, Web Server 6.1 before SP8, and Web Server 7.0 before Update 1 allows remote attackers to obtain source code of JSP files via unknown vectors.
31	CVE-2008-0938	200	+Info	2008-02-25	2008-09-05	4.7	None	Local	Medium	Not required	Complete	None	None
Unspecified vulnerability in the dynamic tracing framework (DTrace) in Sun Solaris 10 allows local users with PRIV_DTRACE_USER or PRIV_DTRACE_PROC privileges to obtain sensitive kernel information via unspecified vectors, a different vulnerability than CVE-2007-4126.
32	CVE-2007-5238	264	+Info	2007-10-05	2010-08-21	2.6	None	Remote	High	Not required	Partial	None	None
Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.2_15 and earlier does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to obtain sensitive information (the Java Web Start cache location) via an untrusted application, aka "three vulnerabilities."
33	CVE-2007-1681		DoS Exec Code +Info	2007-04-19	2008-11-13	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
Format string vulnerability in libwebconsole_services.so in Sun Java Web Console 2.2.2 through 2.2.5 allows remote attackers to cause a denial of service (application crash), obtain sensitive information, and possibly execute arbitrary code via unspecified vectors during a failed login attempt, related to syslog.
34	CVE-2007-0114		+Info	2007-01-08	2008-11-15	5.0	None	Remote	Low	Not required	Partial	None	None
Sun Java System Content Delivery Server 5.0 and 5.0 PU1 allows remote attackers to obtain sensitive information regarding "content details" via unspecified vectors.
35	CVE-2006-6009		+Info	2006-11-21	2008-09-05	5.0	None	Remote	Low	Not required	Partial	None	None
Unspecified vulnerability in the Java Runtime Environment (JRE) Swing library in JDK and JRE 5.0 Update 7 and earlier allows attackers to obtain certain information via unknown attack vectors, related to an untrusted applet accessing data in other applets.
36	CVE-2006-4959		+Info	2006-09-23	2008-09-05	5.0	None	Remote	Low	Not required	Partial	None	None
Sun Secure Global Desktop (SSGD, aka Tarantella) before 4.3 allows remote attackers to obtain sensitive information, including hostnames, versions, and settings details, via unspecified vectors, possibly involving (1) taarchives.cgi, (2) ttaAuthentication.jsp, (3) ttalicense.cgi, (4) ttawlogin.cgi, (5) ttawebtop.cgi, (6) ttaabout.cgi, or (7) test-cgi. NOTE: This information is based upon a vague initial disclosure. Details will be updated as they become available.
37	CVE-2005-4701		+Info	2005-12-31	2008-09-05	2.1	None	Local	Low	Not required	Partial	None	None
Unspecified vulnerability in Process File System (procfs) in Sun Solaris 10 allows local users to obtain sensitive information such as process working directories via unknown attack vectors, possibly pwdx.
38	CVE-2005-3398	200	+Info	2005-11-01	2009-01-08	4.3	None	Remote	Medium	Not required	Partial	None	None
The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables the HTTP TRACE method, which could allow remote attackers to obtain sensitive information such as cookies and authentication data from HTTP headers.
39	CVE-2005-1754	200	+Info	2005-12-31	2008-09-05	5.0	None	Remote	Low	Not required	Partial	None	None
DISPUTED JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0.16, allows remote attackers to read arbitrary files via a full pathname in the argument to the Download parameter. NOTE: Sun and Apache dispute this issue. Sun states: "The report makes references to source code and files that do not exist in the mentioned products."
40	CVE-2005-0359		DoS +Info	2005-08-23	2008-09-05	6.4	None	Remote	Low	Not required	Partial	None	Partial
The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not restrict access to the pmap_set and pmap_unset commands, which allows remote attackers to (1) cause a denial of service by using pmap_unset to un-register a NetWorker service, or (2) obtain sensitive information from NetWorker services by using pmap_set to register a new service.
41	CVE-2005-0109		+Info	2005-03-05	2010-08-21	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to create covert channels, monitor the execution of other threads, and obtain sensitive information such as cryptographic keys, via a timing attack on memory cache misses.
42	CVE-2004-2766	200	+Info	2010-01-28	2010-01-31	4.3	None	Remote	Medium	Not required	Partial	None	None
Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before 5.2hf2.02 allows remote attackers to obtain unspecified "access" to e-mail via a crafted e-mail message, related to a "session hijacking" issue, a different vulnerability than CVE-2005-2022 and CVE-2006-5486.
43	CVE-2004-1354		Dir. Trav. +Info	2004-05-14	2008-09-10	5.0	None	Remote	Low	Not required	Partial	None	None
The Solaris Management Console (SMC) in Sun Solaris 8 and 9 generates different 404 error messages when a file does not exist versus when a file exists but is otherwise inacessible, which could allow remote attackers to obtain sensitive information in conjunction with a directory traversal (..) attack.
44	CVE-2003-1588	255	+Info	2010-02-08	2010-04-28	1.9	None	Local	Medium	Not required	Partial	None	None
Sun Cluster 2.2, when HA-Oracle or HA-Sybase DBMS services are used, stores database credentials in cleartext in a cluster configuration file, which allows local users to obtain sensitive information by reading this file.
45	CVE-2003-1573	89	DoS Sql +Info	2009-06-01	2009-06-02	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
The PointBase 4.6 database component in the J2EE 1.4 reference implementation (J2EE/RI) allows remote attackers to execute arbitrary programs, conduct a denial of service, and obtain sensitive information via a crafted SQL statement, related to "inadequate security settings and library bugs in sun.* and org.apache.* packages."
46	CVE-2001-0077		+Info	2001-02-12	2008-09-05	5.0	None	Remote	Low	Not required	Partial	None	None
The clustmon service in Sun Cluster 2.x does not require authentication, which allows remote attackers to obtain sensitive information such as system logs and cluster configurations.
47	CVE-1999-1258		+Info	1991-01-15	2008-09-05	5.0	None	Remote	Low	Not required	Partial	None	None
rpc.pwdauthd in SunOS 4.1.1 and earlier does not properly prevent remote access to the daemon, which allows remote attackers to obtain sensitive system information.
48	CVE-1999-0795		+Info	1998-03-01	2008-09-09	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
The NIS+ rpc.nisd server allows remote attackers to execute certain RPC calls without authentication to obtain system information, disable logging, or modify caches.
49	CVE-1999-0254		+Info	1998-11-02	2008-09-09	10.0	Admin	Remote	Low	Not required	Complete	Complete	Complete
A hidden SNMP community string in HP OpenView allows remote attackers to modify MIB tables and obtain sensitive information.

Total number of vulnerabilities : 49 Page : 1 (This Page)