If you do not know who that is, please send an email to auscert auscert. Copyright Sun Microsystems, Inc. AusCERT takes no responsibility for consequences which may arise from following or acting on information or advice contained in this security bulletin. If you have any questions or need further information, please contact them directly. Symptoms There are no predictable symptoms that would indicate the described issue has occurred. Sun makes no representations, warranties, or guarantees as to the information contained herein.
|Date Added:||15 May 2011|
|File Size:||40.11 Mb|
|Operating Systems:||Windows NT/2000/XP/2003/2003/7/8/10 MacOS 10/X|
|Price:||Free* [*Free Regsitration Required]|
Sun makes no representations, warranties, or guarantees as to the information contained herein.
Resolution This issue is addressed in the following releases: These unprivileged users may be able to operate servers that falsely pose as other servers or generate forged signatures on emails and software downloads without detection. Contact information for the authors of the original document is included in the Security Bulletin above.
The decision to follow or act on information or advice contained in this security bulletin is the responsibility of each user or organisation, and should be considered in accordance with your organisation’s site policies and procedures.
Information about the Java ERROR (Java in General forum at Coderanch)
If you do not know who that is, please send an email to entsrprise auscert. This vulnerability also affects products that verify signatures on downloaded files. Among NSS-based server products, this vulnerability only affects those that: If you have any questions or need further information, please contact them directly.
Please see the Resolution section below. Copyright Sun Microsystems, Inc.
Sun java enterprise system 2005q4
Sun Java Enterprise System is not available for Solaris 8 on the x86 platform. To determine if the NSS packages are installed on a system, the following command can be run: Contributing Factors This systemm can occur in the following releases: Multiple Sun products are affected by this issue; for more details please see Sun Alert at http: Sun Microsystems Operating System: This vulnerability stems from the code that verifies Ssun signatures of the kind commonly used on X.
If downloading at a later date, it is rnterprise that the bulletin is retrieved directly from the author’s website to ensure that the information is still current. This Sun Alert notification may contain information provided by third parties. This Sun Alert notification may only be used for the purposes contemplated by these agreements.
The issues described in this Sun Alert notification may or may not impact your system s. Symptoms There are no predictable symptoms that would indicate the described issue has occurred.
Impact A vulnerability in the Sun Java Enterprise System JES may allow remote unprivileged users to construct certificates with forged signatures that go undetected and are accepted as valid signatures. This is only the original release of the security bulletin. Drawing on our strong international Jaba relationships we have a high success rate in delivering phishing take-downs.
— Java Enterprise System and Solaris – Security Vulnerability Issue of Forged RSA Signatures
On call after hours for member emergencies only. It may not be updated when updates to the original are made. The mailing list you are subscribed to is maintained within your organisation, so if you do not wish to continue receiving these bulletins you should contact your local IT manager.
AusCERT takes no responsibility for consequences which may arise from following or acting on information or advice contained in this security bulletin.
This issue is also described in the following documents: Previous advisories and external security bulletins can be retrieved from: This Sun Alert notification contains Sun proprietary and confidential information. It is being provided to you pursuant to the provisions of your agreement to purchase services from Sun, or, if you do not have such an agreement, the Sun.