CRLF injection vulnerability in da/DA/Login in Sun Java System Delegated Administrator 6.2 through 6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the HELP_PAGE parameter.

commcli 6.4-3.02_x86: core patch.
Date this patch was last updated by Sun : Apr/20/09

commcli 6.4-3.02: core patch.
Date this patch was last updated by Sun : Apr/20/09

commcli 6.4-3.02_x86: core patch.
Date this patch was last updated by Sun : Apr/20/09

This plugin has been deprecated and either replaced with individual 121582 patch-revision plugins, or deemed non-security related.

commcli 6.4-3.02: core patch.
Date this patch was last updated by Sun : Apr/20/09

This plugin has been deprecated and either replaced with individual 121581 patch-revision plugins, or deemed non-security related.

ID	Name	Product	Family	Severity
24997	Solaris 9 (x86) : 121582-20	Nessus	Solaris Local Security Checks	medium
24996	Solaris 9 (sparc) : 121581-20	Nessus	Solaris Local Security Checks	medium
24955	Solaris 10 (x86) : 121582-20 (deprecated)	Nessus	Solaris Local Security Checks	medium
24953	Solaris 10 (sparc) : 121581-20 (deprecated)	Nessus	Solaris Local Security Checks	medium

Detections

Analytics

CVE-2009-1357

medium

Tenable Plugins

medium

medium

medium

medium