• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Sun Java Runtime Environment Multiple Unspecified Same Origin Policy Violation Vulnerabilities

Solution:
Sun has released an advisory along with fixes. Please see the references for more information.


Oracle JRockit R27.6.0

• Oracle BEA JRockit 1.4.2 R27.6.0 JDK Microsoft Windows (x86 - 32 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.4.2_17-windows_ia32.zip


• Oracle JRockit 1.4.2 R27.6.0 JDK Linux (Intel Itanium - 64 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.4.2_17-linux_ia64.tar.gz


• Oracle JRockit 1.4.2 R27.6.0 JDK Linux (x86 - 32 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.4.2_17-linux_ia32.tar.gz


• Oracle JRockit 1.4.2 R27.6.0 JDK Microsoft Windows (Intel Itanium - 64 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.4.2_17-windows_ia64.zip


• Oracle JRockit 1.4.2 R27.6.0 JDK Sun Solaris (SPARC - 64 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.4.2_17-solaris_sparcv9.tar.gz


• Oracle JRockit 5.0 R27.6.0 JDK Linux (Intel Itanium - 64-bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.5.0_15-linux_ia64.tar.gz


• Oracle JRockit 5.0 R27.6.0 JDK Linux (x86 - 32 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.5.0_15-linux_ia32.tar.gz


• Oracle JRockit 5.0 R27.6.0 JDK Linux (x86 â?? 64 bit, Intel EM64T & AMD64 - 64 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.5.0_15-linux_x86_64.tar.gz


• Oracle JRockit 5.0 R27.6.0 JDK Microsoft Windows (Intel Itanium - 64 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.5.0_15-windows_ia64.zip


• Oracle JRockit 5.0 R27.6.0 JDK Microsoft Windows (x86 - 32 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.5.0_15-windows_ia32.zip


• Oracle JRockit 5.0 R27.6.0 JDK Microsoft Windows (x86 â?? 64 bit, Intel EM64T & AMD64 - 64 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.5.0_15-windows_x86_64.zip


• Oracle JRockit 5.0 R27.6.0 JDK Solaris (SPARC - 64-bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.5.0_15-solaris_sparcv9.tar.gz


• Oracle JRockit 6 R27.6.0 JDK Linux (x86 - 32 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.6.0_05-linux_ia32.tar.gz


• Oracle JRockit 6 R27.6.0 JDK Linux (x86 â?? 64 bit, Intel EM64T & AMD64 - 64 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.6.0_05-linux_x86_64.tar.gz


• Oracle JRockit 6 R27.6.0 JDK Microsoft Windows (x86 - 32 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.6.0_05-windows_ia32.zip


• Oracle JRockit 6 R27.6.0 JDK Microsoft Windows (x86 â?? 64 bit, Intel EM64T & AMD64 - 64 bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.6.0_05-windows_x86_64.zip


• Oracle JRockit 6 R27.6.0 JDK Solaris (SPARC - 64-bit)
  ftp://anonymous:dev2dev%40bea%2Ecom@ftpna.bea.com/pub/releases/securit y/jrockit-jdk1.6.0_05-solaris_sparcv9.tar.gz