exploits , vulnerabilities , articles , Sun Java System Server XSLT Processing Remote Java Method Execution Vulnerability

Title	Sun Java System Server XSLT Processing Remote Java Method Execution Vulnerability
Published	2007-07-10-12:00AM
Updated	2007-10-26-10:26PM
Class	Design Error
CVE	CVE-2007-3715
Remote	Yes
Local	No
Credit	Brad Hill of iSEC Partners reported this issue to the vendor.
Vulnerable	Sun Java System Web Server 7.0 Sun Java System Portal Server 7 Sun Java System Application Server Standard Edition 8.2 Sun Java System Application Server Platform Edition 9.0 Update 1 Sun Java System Application Server Platform Edition 9.0 Sun Java System Application Server Platform Edition 8.2 Sun Java System Application Server Enterprise Edition 8.2 Sun Java 2 Standard Edition SDK 6.0 Update 1 Sun Java 2 Standard Edition SDK 5.0 Update 9 Sun Java 2 Standard Edition SDK 5.0 Update 8 Sun Java 2 Standard Edition SDK 5.0 Update 7 Sun Java 2 Standard Edition SDK 5.0 Update 6 Sun Java 2 Standard Edition SDK 5.0 Update 5 Sun Java 2 Standard Edition SDK 5.0 Update 4 Sun Java 2 Standard Edition SDK 5.0 Update 3 Sun Java 2 Standard Edition SDK 5.0 Update 2 Sun Java 2 Standard Edition SDK 5.0 Update 12 Sun Java 2 Standard Edition SDK 5.0 Update 11 Sun Java 2 Standard Edition SDK 5.0 Update 10 Sun Java 2 Standard Edition SDK 5.0 Update 1 Sun Java 2 Standard Edition SDK 5.0 Sun Java 2 Runtime Environment 6.0 Update 1 Sun Java 2 Runtime Environment 5.0.Update 9 Sun Java 2 Runtime Environment 5.0.Update 12 Sun Java 2 Runtime Environment 5.0.Update 10 Sun Java 2 Runtime Environment 5.0 Update 8 Sun Java 2 Runtime Environment 5.0 Update 7 Sun Java 2 Runtime Environment 5.0 Update 6 Sun Java 2 Runtime Environment 5.0 Update 5 Sun Java 2 Runtime Environment 5.0 Update 4 Sun Java 2 Runtime Environment 5.0 Update 3 Sun Java 2 Runtime Environment 5.0 Update 2 Sun Java 2 Runtime Environment 5.0 Update 11 Sun Java 2 Runtime Environment 5.0 Update 1 Sun Java 2 Runtime Environment 5.0 IAIK XML Signature Library (IXSIL) 0 IAIK XML Security Toolkit (XSECT) 0 Gentoo Linux BEA Systems JRockit R27.3.1 BEA Systems JRockit 6
Not Vulnerable	Sun Java System Web Server 7.0 Update 1 Sun Java 2 Standard Edition SDK 6.0 Update 2 Sun Java 2 Runtime Environment 6.0 Update 2
Code	Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:content@securitydot.net.
TXT

Vulnerabilities - newest 10 RSS | More

2008-12-01 SystemImager Flamethrower Insecure Temporary File Creation Vulnerabilities
2008-12-01 Rumpus FTP Server Command Argument Remote Buffer Overflow Vulnerability
2008-12-01 Rumpus FTP Server HTTP Command Remote Denial of Service Vulnerability
2008-11-29 Multiple ActiveWebSoftwares Products Login Parameters SQL Injection Vulnerabilities
2008-11-29 Venalsur Booking Centre Multiple Cross-Site Scripting Vulnerabilities
2008-11-28 ReVou Login SQL Injection Vulnerability
2008-11-28 Web Calendar System SQL Injection and Cross Site Scripting Vulnerabilities
2008-11-28 SailPlanner Login SQL Injection Vulnerability
2008-11-28 Livio.net WEB Calendar Cross Site Scripting and Multiple SQL Injection Vulnerabilities
2008-11-28 Subtext Anchor Tags HTML Injection Vulnerability