CVE-2008-2945: Input Validation
Sun Java System Access Manager 6.3 through 7.1 and Sun Java System Identity Server 6.1 and 6.2 do not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute arbitrary code via a crafted stylesheet, a related issue to CVE-2007-3715, CVE-2007-3716, and CVE-2007-4289.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-2945?
CVE-2008-2945 has a high severity rating due to the potential for arbitrary code execution.
How do I fix CVE-2008-2945?
To fix CVE-2008-2945, update to the latest versions of Sun Java System Access Manager and Sun Java System Identity Server.
What versions are affected by CVE-2008-2945?
CVE-2008-2945 affects Sun Java System Access Manager versions 6.3 to 7.1 and Sun Java System Identity Server versions 6.1 and 6.2.
Can CVE-2008-2945 be exploited remotely?
Yes, CVE-2008-2945 can be exploited by context-dependent attackers, enabling remote code execution.
What types of attacks are possible with CVE-2008-2945?
CVE-2008-2945 allows attackers to execute arbitrary code via crafted XSLT stylesheets.