• info
• discussion
• exploit
• solution
• references

Sun Java System/iPlanet Messaging Server Webmail JavaScript Injection Vulnerability

Solution:
Sun has released Sun Alert ID: 102479 to address this issue. Please see the referenced advisory for information on obtaining and applying fixes.


Sun Java System Messaging Server 6.0

• Sun 118207-56
  SPARC Platform
  http://sunsolve.sun.com/pub-cgi/show.pl?target=patches/patch-access


• Sun 118208-56
  x86 Platform
  http://sunsolve.sun.com/pub-cgi/show.pl?target=patches/patch-access


• Sun 118209-56
  Linux Platform
  http://sunsolve.sun.com/pub-cgi/show.pl?target=patches/patch-access

Sun Java System Messaging Server 6.2

• Sun 118207-56
  SPARC Platform
  http://sunsolve.sun.com/pub-cgi/show.pl?target=patches/patch-access


• Sun 118208-56
  x86 Platform
  http://sunsolve.sun.com/pub-cgi/show.pl?target=patches/patch-access


• Sun 118209-56
  Linux Platform
  http://sunsolve.sun.com/pub-cgi/show.pl?target=patches/patch-access

Sun Java System Messaging Server 6.1

• Sun 118207-56
  SPARC Platform
  http://sunsolve.sun.com/pub-cgi/show.pl?target=patches/patch-access


• Sun 118208-56
  x86 Platform
  http://sunsolve.sun.com/pub-cgi/show.pl?target=patches/patch-access


• Sun 118209-56
  Linux Platform
  http://sunsolve.sun.com/pub-cgi/show.pl?target=patches/patch-access

Sun iPlanet Messaging Server 5.2

• Sun 5.2hf2.13
  http://sunsolve.sun.com/pub-cgi/show.pl?target=patches/patch-access