CVE-2008-2945 | BDVDB-2026-31295 Detail
Description#
Sun Java System Access Manager 6.3 through 7.1 and Sun Java System Identity Server 6.1 and 6.2 do not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute arbitrary code via a crafted stylesheet, a related issue to CVE-2007-3715, CVE-2007-3716, and CVE-2007-4289.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-201538-1
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43429
- http://support.avaya.com/elmodocs2/security/ASA-2008-294.htm
- http://www.securitytracker.com/id?1020380
- http://www.securityfocus.com/bid/29988
- http://www.vupen.com/english/advisories/2008/1967/references
- http://secunia.com/advisories/30893
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.