NVD

Id
56417  
Name
CVE-2007-4289  
Description
Sun Java System Portal Server 7.0 does not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute an arbitrary Java method via a crafted stylesheet, a related issue to CVE-2007-3715.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-08-09  
Modified Date
2008-09-05  
Seq
2007-4289  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
287368 56417 CVE-2007-4289 1018513  View
287369 56417 CVE-2007-4289 103015  View
287370 56417 CVE-2007-4289 http://www.isecpartners.com/advisories/2007-04-dsig.txt  View
287371 56417 CVE-2007-4289 http://www.isecpartners.com/files/XMLDSIG_Command_Injection.pdf  View
287372 56417 CVE-2007-4289 20070712 Whitepaper: Command Injection in XML Digital Signatures and Encryption  View
287373 56417 CVE-2007-4289 sun-jsps-xslt-code-execution(35811)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57259 JVNDB-2007-005951 Sun Java System Portal Server における任意の Java メソッドを実行される脆弱性 Sun Java System Portal Server は、XML 署名の XSLT トランスフォーム内の XSLT スタイルリストを適切に処理しないため、任意の Java メソッドを実行される脆弱性が存在します。 CVE-2007-4289 27644 CVE-2007-4289 56417 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005951.html 2007-08-03 2012-12-20 View