Sun UK is running a morning briefing on End to End to Security. The event is on Thursday 5th June in the London Customer Briefing Center (for LOSUG people this is the same place we meet). Details and registration information can be found here. Dave Walker and I are among the speakers.

-- Darren

tags: briefing security uk

Permalink | Comments [0]

Permalink | Comments [0]

Sun is not affected by the OpenSSL random number generator weakness vulnerability described in CVE-2008-0166 and CERT Vulnerability Note VU#925211. The versions of OpenSSL bundled with Solaris 10, Nevada, and OpenSolaris are not impacted by this issue. Permalink | Comments [0]

Permalink | Comments [0]

Security vulnerabilities in the Solaris print service may allow a remote unprivileged user the ability to run arbitrary code as root or�� cause�� a Denial of Service (DoS) condition.

Permalink | Comments [0]

A cross-site scripting (XSS) vulnerability in the Sun Java System Web Server search module may allow a local or remote unprivileged user the ability to execute arbitrary scripts on the system hosting the web server.

Permalink | Comments [0]

A vulnerability in Sun Java System Application Server and Sun Java System Web Server may allow unauthorized users to view the JSP source code.

Permalink | Comments [0]

Multiple security vulnerabilities in the Tcl GUI Toolkit (libtk(3LIB)) may allow a remote unprivileged user who provides a specially crafted GIF image to cause a denial of service (DoS) to applications using the libtk library to process images or execute arbitrary code with the privileges of the user running such applications.

Additional information regarding these issues is available at:

Permalink | Comments [0]

A security vulnerability in the Sun Ray Kiosk Mode software included with Sun Ray Server Software (SRSS) 4.0 may allow a local or remote user with Sun Ray administration privileges to execute arbitrary commands with root privileges.

Permalink | Comments [0]

A security vulnerability in the TCP implementation of Solaris 8, 9 and 10 may allow a remote unprivileged user to cause a Solaris system which is undergoing a "TCP SYN" flood condition to be slow to accept new network connections.�� Such network connections may time out without establishing a connection.�� This would lead to a Denial of Service (DoS) to the network services provided by that system. In addition, a uniprocessor system may also experience overall slowdown due to high CPU usage, resulting in a Denial of Service to the system as a whole.

Permalink | Comments [0]

Permalink | Comments [0]

A security vulnerability related to X11 forwarding within the SSH product shipped with Solaris may allow a local unprivileged user to gain unauthorized access to another user's X11 session. This may allow execution of code with the privileges of that user or may result in the disclosure of sensitive data related to the user's session.

This issue is also referenced in the following document:

Permalink | Comments [0]

Two security vulnerabilities have been found in the Apache HTTP server which affect the Apache 2.0 web server bundled with Solaris 10 and the Apache 1.3 web server bundled with Solaris 8, Solaris 9 and Solaris 10.

The first issue, a Cross Site Scripting (CSS or XSS) vulnerability in the "mod_imap" Apache server module (CVE-2007-5000), may allow a local or remote unprivileged user to inject arbitrary web script or HTML. This may allow the unprivileged user to bypass access control and gain access to unauthorized data.

The second issue, a Cross Site Scripting (CSS or XSS) vulnerability in the "mod_status" Apache server module (CVE-2007-6388), may allow a local or remote unprivileged user to inject arbitrary web script or HTML. This may allow the unprivileged user to bypass access control and gain access to unauthorized data.

Additional information regarding these issues is available at:

Permalink | Comments [0]

A security vulnerability in Solaris 10 related to the SCTP protocol may allow a local or remote unprivileged user to cause a system panic resulting in a Denial of Service (DoS) condition. (See also sctp(7P)).

Permalink | Comments [0]

A security vulnerability in Solaris 10 related to the SCTP protocol (see sctp(7P)) may allow a local or remote unprivileged user to cause significant performance degradation or hang the system or network devices, resulting in a Denial of Service (DoS) condition.

Permalink | Comments [0]