----------------------------------------------------------------------

To improve our services to our customers, we have made a number of
additions to the Secunia Advisories and have started translating the
advisories to German.

The improvements will help our customers to get a better
understanding of how we reached our conclusions, how it was rated,
our thoughts on exploitation, attack vectors, and scenarios.

This includes:
* Reason for rating
* Extended description
* Extended solution
* Exploit code or links to exploit code
* Deep links

Read the full description:
http://corporate.secunia.com/products/48/?r=l

----------------------------------------------------------------------

TITLE:
Sun JES / Solaris OpenSSL RSA Signature Forgery

SECUNIA ADVISORY ID:
SA22585

VERIFY ADVISORY:
http://secunia.com/advisories/22585/

CRITICAL:
Less critical

IMPACT:
Security Bypass

WHERE:
>From remote

OPERATING SYSTEM:
Sun Solaris 9
http://secunia.com/product/95/
Sun Solaris 10
http://secunia.com/product/4813/

SOFTWARE:
Sun Java Enterprise System 2003Q4
http://secunia.com/product/3930/
Sun Java Enterprise System 2004Q2
http://secunia.com/product/5885/
Sun Java Enterprise System 2005Q1
http://secunia.com/product/5886/
Sun Java Enterprise System 2005Q4
http://secunia.com/product/12429/

DESCRIPTION:
Sun has acknowledged a vulnerability in Sun Java Enterprise System
and Solaris, which potentially can be exploited by malicious people
to bypass certain security restrictions.

For more information:
SA21709

The following versions are affected:
* Sun Solaris 9
* Sun Solaris 10
* Sun Java Enterprise System 2003Q4
* Sun Java Enterprise System 2004Q2
* Sun Java Enterprise System 2005Q1
* Sun Java Enterprise System 2005Q4

SOLUTION:
Apply patches.

-- SPARC Platform --

Solaris 10:
Apply patch 119213-10 or later.

Sun Java Enterprise System 2004Q2, 2005Q1 and 2005Q4 for Solaris 8:
Apply patch 119209-10 or later.

Sun Java Enterprise System 2004Q2, 2005Q1 and 2005Q4 for Solaris 9:
Apply patch 119211-10 or later.

Sun Java Enterprise System 2005Q1 and 2005Q4 for Solaris 10:
Apply patch 119213-10 or later.

-- x86 Platform --

Solaris 10:
Apply patch 119214-10 or later.

Sun Java Enterprise System 2004Q2, 2005Q1 and 2005Q4 for Solaris 9:
Apply patch 119212-10 or later.

Sun Java Enterprise System 2005Q1 and 2005Q4 for Solaris 10:
Apply patch 119214-10 or later.

-- Linux Platform --

Sun Java Enterprise System 2003Q4, 2004Q2, 2005Q1 and 2005Q4 for
Linux:
Apply patch 121656-10 or later.

-- HP-UX Platform --

Sun Java Enterprise System 2005Q1 and 2005Q4 for HP-UX:
Apply patch 124379-01 or later.

For some versions a final resolution is pending completion.

ORIGINAL ADVISORY:
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102656-1&searchclause

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------