Уязвимость в Sun Java System Web / Application Server

Описание:
Уязвимость позволяет удаленному пользователю обойти некоторые ограничения безопасности и повысить свои привилегии на системе.

Уязвимость существует из-за ошибки при обработке таблиц стилей XSLT, содержащихся в XSLT Transforms в XML Signatures. Удаленный пользователь может с помощью специально сформированной XSLT таблицы стилей выполнить произвольные Java методы.

URL производителя: www.sun.com

Решение: Установите последнюю версию с сайта производителя.

-- SPARC Platform --

Sun Java System Web Server 7.0 with Update 1 or later.
http://www.sun.com/download/products.xml?id=467713d6

Sun Java System Application Server Platform Edition 8.2 with file-based patch 124679-01 or SVR4 patch 124672-02 or later:
http://sunsolve.sun.com/search/docume...setkey=urn:cds:docid:1-21-124679-01-1
http://sunsolve.sun.com/search/docume...setkey=urn:cds:docid:1-21-124672-02-1

Sun Java System Application Server Enterprise Edition 8.2 with file-based patch 124675-01 or SVR4 patch 124672-02 or later:
http://sunsolve.sun.com/search/docume...setkey=urn:cds:docid:1-21-124675-01-1
http://sunsolve.sun.com/search/docume...setkey=urn:cds:docid:1-21-124672-02-1


-- x86 Platform--

Sun Java System Web Server 7.0 with Update 1 or later:
http://www.sun.com/download/products.xml?id=467713d6

Sun Java System Application Server Platform Edition 8.2 with file-based patch 124680-01 or SVR4 patch 124673-02 or later:
http://sunsolve.sun.com/search/docume...setkey=urn:cds:docid:1-21-124680-01-1
http://sunsolve.sun.com/search/docume...setkey=urn:cds:docid:1-21-124673-02-1

Sun Java System Application Server Enterprise Edition 8.2 with file-based patch 124676-01 or SVR4 patch 124673-02 or later:
http://sunsolve.sun.com/search/docume...setkey=urn:cds:docid:1-21-124676-01-1
http://sunsolve.sun.com/search/docume...setkey=urn:cds:docid:1-21-124673-02-1


-- Linux --

Sun Java System Web Server 7.0 with Update 1 or later:
http://www.sun.com/download/products.xml?id=467713d6

Sun Java System Application Server Platform Edition 8.2 with file-based patch 124681-01 or RHEL3.0/RHEL4.0 (Pkg_patch) 124674-02 or later:
http://sunsolve.sun.com/search/docume...setkey=urn:cds:docid:1-21-124681-01-1
http://sunsolve.sun.com/search/docume...setkey=urn:cds:docid:1-21-124674-02-1

Sun Java System Application Server Enterprise Edition 8.2 with file-based patch 124677-01 or RHEL3.0/RHEL4.0 (Pkg_patch) 124674-02 or later:
http://sunsolve.sun.com/search/docume...setkey=urn:cds:docid:1-21-124677-01-1
http://sunsolve.sun.com/search/docume...setkey=urn:cds:docid:1-21-124674-02-1

-- Windows --

Sun Java System Web Server 7.0 with Update 1 or later:
http://www.sun.com/download/products.xml?id=467713d6

Sun Java System Application Server Platform Edition 8.2 with file-based patch 124682-01 or later:
http://sunsolve.sun.com/search/docume...setkey=urn:cds:docid:1-21-124682-01-1

Sun Java System Application Server Enterprise Edition 8.2 with file-based patch 124678-01 or package-based patch 124684-02 or later:
http://sunsolve.sun.com/search/docume...setkey=urn:cds:docid:1-21-124678-01-1
http://sunsolve.sun.com/search/docume...setkey=urn:cds:docid:1-21-124684-02-1

-- HP-UX --

Sun Java System Web Server 7.0 with Update 1 or later:
http://www.sun.com/download/products.xml?id=467713d6