CVE

Id
27646  
CVE No.
CVE-2007-4289  
Status
Candidate  
Description
Sun Java System Portal Server 7.0 does not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute an arbitrary Java method via a crafted stylesheet, a related issue to CVE-2007-3715.  
Phase
Assigned (20070809)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
284561 27646 CVE-2007-4289 BUGTRAQ:20070712 Whitepaper: Command Injection in XML Digital Signatures and Encryption  View
284562 27646 CVE-2007-4289 URL:http://www.securityfocus.com/archive/1/archive/1/473553/100/0/threaded  View
284563 27646 CVE-2007-4289 MISC:http://www.isecpartners.com/advisories/2007-04-dsig.txt  View
284564 27646 CVE-2007-4289 MISC:http://www.isecpartners.com/files/XMLDSIG_Command_Injection.pdf  View
284565 27646 CVE-2007-4289 SUNALERT:103015  View
284566 27646 CVE-2007-4289 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-103015-1  View
284567 27646 CVE-2007-4289 SECTRACK:1018513  View
284568 27646 CVE-2007-4289 URL:http://securitytracker.com/id?1018513  View
284569 27646 CVE-2007-4289 SECUNIA:26327  View
284570 27646 CVE-2007-4289 URL:http://secunia.com/advisories/26327  View
284571 27646 CVE-2007-4289 XF:sun-jsps-xslt-code-execution(35811)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51921 JVNDB-2007-000584 Cisco IOS における複数のサービス運用妨害 (DoS) の脆弱性 Cisco IOS には、複数のサービス運用妨害 (DoS) の脆弱性が存在します。 CVE-2007-4291 27646 7.1 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000584.html  View