CVSS: 4.3EPSS: 0%CPEs: 6EXPL: 0CVE-2007-4025
https://notcve.org/view.php?id=CVE-2007-4025
Unspecified vulnerability in Sun Java System (SJS) Application Server 8.1 through 9.0 before 20070724 on Windows allows remote attackers to obtain JSP source code via unspecified vectors. Vulnerabilidad sin especificar en el Sun Java System (SJS) Application Server 8.1 hasta la 9.0 anterior al 20070724 bajo Windows, permite a atacantes remotos la obtención de código fuente JSP a través de vectores sin especificar. • http://osvdb.org/37250 http://secunia.com/advisories/26187 http://sunsolve.sun.com/search/document.do?assetkey=1-26-103000-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-201537-1 http://www.securityfocus.com/bid/25058 http://www.securitytracker.com/id?1018452 http://www.vupen.com/english/advisories/2007/2647 https://exchange.xforce.ibmcloud.com/vulnerabilities/35579 •
CVSS: 1.7EPSS: 0%CPEs: 1EXPL: 0CVE-2007-3700
https://notcve.org/view.php?id=CVE-2007-3700
Sun Java System Access Manager (formerly Java System Identity Server) before 20070710, when the message debug level is configured in the com.iplanet.services.debug.level property in AMConfig.properties, logs cleartext login passwords, which allows local users to gain privileges by reading /var/opt/SUNWam/debug/amAuth. Sun Java System Access Manager (formalmente Java System Identity Server) anterior a 20070710, cuando el mensaje de nivel del nivel de depuración está configurado en la propiedad com.iplanet.services.debug.level en AMConfig.properties, registros en texto plano de contraseñas, lo cual permite a usuarios locales ganar privilegios leyendo /var/opt/SUNWam/debug/amAuth. • http://osvdb.org/37249 http://secunia.com/advisories/26030 http://sunsolve.sun.com/search/document.do?assetkey=1-26-101918-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-200386-1 http://www.securityfocus.com/bid/24859 http://www.securitytracker.com/id?1018370 http://www.vupen.com/english/advisories/2007/2496 https://exchange.xforce.ibmcloud.com/vulnerabilities/35339 •
CVSS: 9.3EPSS: 2%CPEs: 21EXPL: 0CVE-2007-3715
https://notcve.org/view.php?id=CVE-2007-3715
Sun Java System Application Server and Web Server 7.0 through 9.0 before 20070710 do not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute an arbitrary Java method via a crafted stylesheet, a related issue to CVE-2007-3716. Sun Java System Application Server y Web Server versiones 7.0 hasta 9.0 anterior al 20070710, no procesan apropiadamente las hojas de estilo XSLT en las transformaciones de XSLT en firmas XML, lo que permite a atacantes dependiendo del contexto ejecutar un método Java arbitrario por medio de una hoja de estilo diseñada, un problema relacionado con CVE-2007-3716. • http://osvdb.org/37248 http://secunia.com/advisories/26023 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102992-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-200054-1 http://www.isecpartners.com/advisories/2007-04-dsig.txt http://www.isecpartners.com/files/XMLDSIG_Command_Injection.pdf http://www.securityfocus.com/archive/1/473552/100/0/threaded http://www.securityfocus.com/archive/1/473553/100/0/threaded http://www.securityfocus.com/bid/24850 http& • CWE-20: Improper Input Validation •
CVSS: 5.0EPSS: 0%CPEs: 8EXPL: 0CVE-2007-3224
https://notcve.org/view.php?id=CVE-2007-3224
Unspecified vulnerability in Sun ONE/Java System Directory Server (slapd) 6.0, and 5.x before 5.2 Patch 5, allows remote attackers to determine the existence of attributes of an entry via unspecified vectors. Vulnerabilidad no especificada en Sun ONE/Java System Directory Server (slapd) 6.0, y 5.x anterior a 5.2 Parche 5, permite a atacantes remotos en determinar la existencia de atributos de una entrada a través de vectores no especificados. • http://osvdb.org/37247 http://secunia.com/advisories/25666 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102876-1 http://www.securityfocus.com/bid/24467 http://www.securitytracker.com/id?1018254 http://www.vupen.com/english/advisories/2007/2189 https://exchange.xforce.ibmcloud.com/vulnerabilities/34858 •
CVSS: 6.4EPSS: 0%CPEs: 2EXPL: 0CVE-2007-3225
https://notcve.org/view.php?id=CVE-2007-3225
Unspecified vulnerability in Sun Java System Directory Server (slapd) 6.0, and 5.2 with Patch 3 or 4, allows remote attackers to modify certain data via unknown vectors. Vulnerabilidad no especificada en Sun Java System Directory Server (slapd) 6.0, y 5.2 with Patch 3 o 4, permite a atacantes remotos modificar ciertos datos a través de vectores desconocidos. • http://osvdb.org/37246 http://secunia.com/advisories/25666 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102875-1 http://www.securityfocus.com/bid/24468 http://www.securitytracker.com/id?1018255 http://www.vupen.com/english/advisories/2007/2189 https://exchange.xforce.ibmcloud.com/vulnerabilities/34859 •