Sun Java System Access Manager XSLT Stylesheets XML Signature Remote Code Execution Vulnerability

Bugtraq ID:	29988
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jun 27 2008 12:00AM
Updated:	Jun 30 2008 06:40PM
Credit:	Brad Hill of iSEC Partners
Vulnerable:	Sun Java System Identity Manager 6.2 Solaris x86 Sun Java System Identity Manager 6.2 Solaris Sun Java System Identity Manager 6.2 Solaris Sun Java System Access Manager 7.1 Windows Sun Java System Access Manager 7.1 Solaris x86 Sun Java System Access Manager 7.1 Solaris SPARC Sun Java System Access Manager 7.1 Linux Sun Java System Access Manager 7.0 2005Q4 Windows Sun Java System Access Manager 7.0 2005Q4 Solaris x Sun Java System Access Manager 7.0 2005Q4 Solaris S Sun Java System Access Manager 7.0 2005Q4 Linux Sun Java System Access Manager 6.2 2004Q2 Solaris x Sun Java System Access Manager 6.2 2004Q2 Solaris S Sun Java System Access Manager 6.2 Sun Java System Access Manager 6 2005Q1 Solaris x86 Sun Java System Access Manager 6 2005Q1 Solaris SPA Sun Java System Access Manager 6 2005Q1 Linux

Not Vulnerable: