Vulnerabilities for Secure global desktop (...) - CXSECURITY.COM

Vulnerabilities for 'Secure global desktop'

2006-10-10

CVE-2006-5201

CWE-Other

Multiple packages on Sun Solaris, including (1) NSS; (2) Java JDK and JRE 5.0 Update 8 and earlier, SDK and JRE 1.4.x up to 1.4.2_12, and SDK and JRE 1.3.x up to 1.3.1_19; (3) JSSE 1.0.3_03 and earlier; (4) IPSec/IKE; (5) Secure Global Desktop; and (6) StarOffice, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents these products from correctly verifying X.509 and other certificates that use PKCS #1.

2006-09-23

CVE-2006-4959

CWE-Other

Sun Secure Global Desktop (SSGD, aka Tarantella) before 4.3 allows remote attackers to obtain sensitive information, including hostnames, versions, and settings details, via unspecified vectors, possibly involving (1) taarchives.cgi, (2) ttaAuthentication.jsp, (3) ttalicense.cgi, (4) ttawlogin.cgi, (5) ttawebtop.cgi, (6) ttaabout.cgi, or (7) test-cgi. NOTE: This information is based upon a vague initial disclosure. Details will be updated as they become available.

CVE-2006-4958

CWE-Other

Multiple cross-site scripting (XSS) vulnerabilities in Sun Secure Global Desktop (SSGD, aka Tarantella) before 4.20.983 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving (1) taarchives.cgi, (2) ttaAuthentication.jsp, (3) ttalicense.cgi, (4) ttawlogin.cgi, (5) ttawebtop.cgi, (6) ttaabout.cgi, or (7) test-cgi. NOTE: This information is based upon a vague initial disclosure. Details will be updated as they become available.

>>> Vendor: SUN 200 Products

Java virtual machine

Web-based enterprise management

Solstice adminsuite

Netbeans developer

Solstice backup

Solaris isp server

Iplanet web server

Java system web server

Solaris answerbook2

Hotjava browser

Iplanet certificate management system

Javaserver web dev kit

Iplanet directory server

Management+center

One application server

Sun pci ii driver

Sunone starter kit

Ray server software

Solaris pc netlink

Enterprise authentication mechanism

One directory server

Crypto accelerator 4000

Java system calendar server

Java desktop system

Java enterprise system

Java system application server

Enterprise storage manager

Storedge 3310 scsi array

Storedge 3510 fc array

Java system web proxy server

Storedge sam-qfs

Storeedge performance suite

Storeedge utilization suite

Iplanet messaging server

One messaging server

Storedge enterprise backup software

Secure global desktop

Storedge 6130 arrays

Java system directory proxy server

Java system directory server

One administration server

Java system communications express

Java communications services delegated administrator

Java system access manager

Java studio enterprise

N1 system manager

Storage automated diagnostic environment

Java system content delivery server

Java system messaging server

Iplanet messaging server messenger express

Java system messenger express

Chainkey java code protection

Java dynamic management kit

See all Products for Vendor SUN

Copyright 2024, cxsecurity.com