CVE-2007-4289 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2007-4289
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-4289

Description: Sun Java System Portal Server 7.0 does not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute an arbitrary Java method via a crafted stylesheet, a related issue to CVE-2007-3715.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/35811 SUNALERT http://sunsolve.sun.com/search/document.do?assetkey=1-26-103015-1 ST 1018513 SAID Secunia Advisory: SA26327 MISC http://www.isecpartners.com/advisories/2007-04-dsig.txt http://www.isecpartners.com/files/XMLDSIG_Command_Injection.pdf BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/473553/100/0/threaded

Return to the previous page.