Explanation of Sun Alert ID: 101770

Hi @all,
my colleagues and I don`t understand the following SUN explanation.
Sun Alert ID: 101770
"A new security vulnerability in the iPlanet Messaging Server/Sun ONE Messaging Server may allow a remote unprivileged user the ability to cause JavaScript to be evaluated in a local user's Internet Explorer (IE) browser and thus execute arbitrary code with the privileges of the user running IE."
Have anybody the ability to explain this in his own words???
Thanks !!!
Cheers
Stefan

Yeah:
First, this only affects IE. No other client is affected.
Second, it's only if you allow users to use webmail or UWC
Third, as far as we know, nobody has actually done this, yet. The technique was not released.
Fourth, the fix is due out tomorrow for 5.2, and very shortly for 6.2. No fix will be made for 6.0 or 6.1
The problem appears to be that you can create a message that IE will actually run on the user's PC. I suspect that this is really an IE issue, but we're fixing it as quickly as we can.

Similar Messages

10/22/09 SUN Alert Patch Cluster

I just applied the 10/22/09 SUN Alert Patch Cluster, and only 16 of the 176 patches were applied. Is this reasonable? I've been applying the most recent Alert patch cluster every three months for about 1-1/2 years.

continued.
I removed patch 138217-01 (svccfg & svcprop patch) and re-applied it.
Then, after booting into S-mode, I tried to continue with the broken patch 139555-08 (kernel).
It ends with
! root@jumpstart:/var/spool/patch # patchadd 139555-08
Validating patches...
Loading patches installed on the system...
Done!
Loading patches requested to install.
Preparing checklist for non-global zone check...
Checking non-global zones...
This patch passes the non-global zone check.
139555-08
Summary for zones:
Zone oem
Rejected patches:
None.
Patches that passed the dependency check:
139555-08
Patching global zone
Adding patches...
Checking installed patches...
Executing prepatch script...
Installing patch packages...
Pkgadd failed. See /var/tmp/139555-08.log.21103 for details
Patchadd is terminating.
! root@jumpstart:/var/spool/patch #the logfile shows
! root@jumpstart:/var/spool/patch # vi /var/tmp/139555-08.log.21103
Dryrun complete.
No changes were made to the system.
This appears to be an attempt to install the same architecture and
version of a package which is already installed. This installation
will attempt to overwrite this package.
pkgadd: ERROR: couldn't lock in /var/run/.patchSafeMode/root/var/sadm/install (s
erver running?): Resource temporarily unavailable
Installation of <SUNWarc> failed (internal error).
No changes were made to the system.Help!
-- Nick

Workaround for Sun Alert 49475 on iWS 4.0

Hi.
I am trying to fix the security vulnerabilities on Web server (iPlanet Web Server 4.0 SP6) by the following workaround
for Sun Alert# 49475.
================================================================
4. Relief/Workaround
If you are not able to upgrade (see Resolution below),
the following is provided as a workaround.
Edit the files "index.lst" and "nescore.spm" in the following
directories:
<SERVER ROOT>/bin/https/admin/html
<SERVER ROOT>/bin/https/httpadmin/html
Add a semicolon ";" (comments out the line) at the beginning of
the following lines:
--Option:viewacc,View Access Log
--Option:viewerr,View Error Log
This disables the Admin server from displaying the log files.
================================================================
However, I cannot find the file "nescore.spm", which is the one of
the target files. (I can find "index.lst".)
% ls bin/https/admin/html/nescore.spm
bin/https/admin/html/nescore.spm: No such file or directory
% ls bin/https/httpadmin/html/nescore.spm
bin/https/httpadmin/html/nescore.spm: No such file or directory
I do find the files named "svrcore.apm" and "svrcore.spm"
% grep 'View Access Log' bin/https/admin/html/svrcore.apm
--Option:viewacc,View Access Log
% grep 'View Access Log' bin/https/httpadmin/html/svrcore.spm
--Option:viewacc,View Access Log
Could you tell me the correct target files ?
The Server is iPlanet Web Server 4.0SP6 on Solaris 7.
Thank you.
Kenn

I am using the Galaxy Tab 7.7 P6800, initially was Honeycomb3.2, and upgraded to ICS 4.0.4 officially released by Samsung lately.
I have checked with Samsung and below are their replied:
Based on your email, please try this steps:
- Please download adobe flash player 11.apk from your pc,
- Download Kies onto your pc, transfer this file to your mobile/tablet using the usb cable,
- Please ensure "Unkown Resources" is ticked,
- Locate the flash11.apk onyour mobile/tablet, select install,
- After installing, restart your device,
- Please take note Jelly Bean O/S DOES NOT SUPPORT.
Samsung did not provide me the direct link for downloading the flash 11.apk. However, I google it and manage to locate the link, the link is:
"https://play.google.com/store/apps/details?id=com.adobe.flashplayer&feature=search_result# ?t=W251bGwsMSwxLDEsImNvbS5hZG9iZS5mbGFzaHBsYXllciJd"
I have installed and so far working fine, actually flash player is only for surfing certain websites that contain flash images that require flash, if not, is not necessary.

Obtaining obsoleted Sun Alert patch Cluster

I need to build a Solaris 10 Sparc update 3 with Sun Alert Patch Cluster July 16 2007.
I cannot use a more recent Solaris instal version, nor can I use a more recent Sun Alert Patch Cluster version.
I cannot locate this specific Sun Alert Patch Cluster version for download from Sunsolve.
Can anyone advise if it is possible to obtain this Sun Alert Patch Cluster?

continued.
I removed patch 138217-01 (svccfg & svcprop patch) and re-applied it.
Then, after booting into S-mode, I tried to continue with the broken patch 139555-08 (kernel).
It ends with
! root@jumpstart:/var/spool/patch # patchadd 139555-08
Validating patches...
Loading patches installed on the system...
Done!
Loading patches requested to install.
Preparing checklist for non-global zone check...
Checking non-global zones...
This patch passes the non-global zone check.
139555-08
Summary for zones:
Zone oem
Rejected patches:
None.
Patches that passed the dependency check:
139555-08
Patching global zone
Adding patches...
Checking installed patches...
Executing prepatch script...
Installing patch packages...
Pkgadd failed. See /var/tmp/139555-08.log.21103 for details
Patchadd is terminating.
! root@jumpstart:/var/spool/patch #the logfile shows
! root@jumpstart:/var/spool/patch # vi /var/tmp/139555-08.log.21103
Dryrun complete.
No changes were made to the system.
This appears to be an attempt to install the same architecture and
version of a package which is already installed. This installation
will attempt to overwrite this package.
pkgadd: ERROR: couldn't lock in /var/run/.patchSafeMode/root/var/sadm/install (s
erver running?): Resource temporarily unavailable
Installation of <SUNWarc> failed (internal error).
No changes were made to the system.Help!
-- Nick

How can i identyfy the Versions of Sun and Solaris

is it Sun OS 5.5.1 equveleant solaris 8. What i would like to know is if a patch is released for solaris 8 operating system from sun alerts do they have to be applied to sun os 5.5.1. Is the Sun OS 5.5.1 still supported and the patches been released.
How do i find the equvalent version a document on the web says Sun OS 5.5.1 is equvalant to solaris 2.5.1 , how is it related. Please advice.
Thanks
Ravi

InfoDoc #46808 from the Archived Collection lists the versions of Solaris/SunOS and kernel (unfortunately starting with Solaris 2.6).
This InfoDoc contains a pointer to InfoDoc #21202 for further explanation.
http://sunsolve.sun.com/search/document.do?assetkey=1-9-46808-1&searchclause=%22Solaris%20version%22
I forwarded a more complete list as a PDF file to SunSolve about 1 1/2 years ago. Unfortunately they weren't able to process PDF files ...
Robert, if your email account @....edu.au is still valid, I can forward the file (about 50K) to you. In the meantime I added Solaris 9 0/05 upto Solaris 10 6/06 to my list. The listed initial kernel patch revisions are only for SPARC (like in the original InfoDoc).
MAAL

Sun VDI 3.0 Patch 3 is now available at SunSolve

Hi folks,
we just released a third patch revision for Sun VDI 3.0. The patch binaries are available at SunSolve:
[Patch ID 141481-03 (Solaris 10 sparc) |http://sunsolve.sun.com/search/document.do?assetkey=1-21-141481-03-1]
[Patch ID 141482-03 (Solaris 10 x86) |http://sunsolve.sun.com/search/document.do?assetkey=1-21-141482-03-1]
Please notice that due to CR 6880209 ("The VirtualBox 2.0.x web service doesn't require clients to authenticate") both patch binaries are flagged as security relevant. This affects customers using VirtualBox as virtualization platform. A corresponding Sun Alert (268328) will be published soon.
This patch is accompanied with a minor update release of VirtualBox (*VirtualBox 2.0.12*). This updated VirtualBox version must be installed after applying the Sun VDI 3.0 patch 3 (see instructions below). The updated VirtualBox installer for Solaris 10 is available from the [Sun VDI 3.0 download page|http://www.sun.com/software/vdi/get.jsp]. VirtualBox binaries for other operating systems, for example, for creating desktop templates on your preferred platform, are available here.
- Klaus
The following steps are recommended for updating VirtualBox installations:
1. Login to the Sun VDI administration UI (http://yourserver:1800)
2. Select the affected VirtualBox desktop provider
3. Switch to the "Hosts" tab
4. Select the desired VirtualBox host and click on "Disable"
This ensures that no new desktops/virtual machines will be balanced/started on this host. Please notice, that this will not stop any already running desktops on this host. Thus you either need to ask users to shutdown their desktops or you explicitly trigger the shutdown/power off yourself using the administration UI. After the shutdown, users can immediately request their desktops again - new desktops will automatically be started on the remaining (enabled) VirtualBox hosts (assuming that more than one VirtualBox host is configured in your setup).
5. Download the updated VirtualBox installer from the [Sun VDI 3.0 download page|http://www.sun.com/software/vdi/get.jsp] and extract the archive in a temporary location.
6. Un-install the previous VirtualBox version by triggering
# vbox_2.0/vbox-install -u7. Install the new VirtualBox version by executing
# vbox_2.0/vbox-install8. If the installation fails due to an issue with the VirtualBox kernel module, reboot the machine and repeat step 7 again.
The installation of the new VirtualBox version will change the SSL certificate of the web service. Thus you need to re-import the certificate in Sun VDI 3.0 to establish the communication again.
1. In the Sun VDI administration UI select the affected VirtualBox desktop provider.
2. Switch to the "Hosts" tab
3. Select the desired VirtualBox host and click on "Edit"
4. In the host wizard confirm the changed certificate and click on "Finish"
The last step is to enable the VirtualBox host again:
5. On the "Hosts" tab select the disabled VirtualBox host and click on "Enable"
At this point the Sun VDI 3.0 system will again balance desktops to the updated VirtualBox host. You can now update the next VirtualBox host in your setup.

Hi folks,
we just released a third patch revision for Sun VDI 3.0. The patch binaries are available at SunSolve:
[Patch ID 141481-03 (Solaris 10 sparc) |http://sunsolve.sun.com/search/document.do?assetkey=1-21-141481-03-1]
[Patch ID 141482-03 (Solaris 10 x86) |http://sunsolve.sun.com/search/document.do?assetkey=1-21-141482-03-1]
Please notice that due to CR 6880209 ("The VirtualBox 2.0.x web service doesn't require clients to authenticate") both patch binaries are flagged as security relevant. This affects customers using VirtualBox as virtualization platform. A corresponding Sun Alert (268328) will be published soon.
This patch is accompanied with a minor update release of VirtualBox (*VirtualBox 2.0.12*). This updated VirtualBox version must be installed after applying the Sun VDI 3.0 patch 3 (see instructions below). The updated VirtualBox installer for Solaris 10 is available from the [Sun VDI 3.0 download page|http://www.sun.com/software/vdi/get.jsp]. VirtualBox binaries for other operating systems, for example, for creating desktop templates on your preferred platform, are available here.
- Klaus
The following steps are recommended for updating VirtualBox installations:
1. Login to the Sun VDI administration UI (http://yourserver:1800)
2. Select the affected VirtualBox desktop provider
3. Switch to the "Hosts" tab
4. Select the desired VirtualBox host and click on "Disable"
This ensures that no new desktops/virtual machines will be balanced/started on this host. Please notice, that this will not stop any already running desktops on this host. Thus you either need to ask users to shutdown their desktops or you explicitly trigger the shutdown/power off yourself using the administration UI. After the shutdown, users can immediately request their desktops again - new desktops will automatically be started on the remaining (enabled) VirtualBox hosts (assuming that more than one VirtualBox host is configured in your setup).
5. Download the updated VirtualBox installer from the [Sun VDI 3.0 download page|http://www.sun.com/software/vdi/get.jsp] and extract the archive in a temporary location.
6. Un-install the previous VirtualBox version by triggering
# vbox_2.0/vbox-install -u7. Install the new VirtualBox version by executing
# vbox_2.0/vbox-install8. If the installation fails due to an issue with the VirtualBox kernel module, reboot the machine and repeat step 7 again.
The installation of the new VirtualBox version will change the SSL certificate of the web service. Thus you need to re-import the certificate in Sun VDI 3.0 to establish the communication again.
1. In the Sun VDI administration UI select the affected VirtualBox desktop provider.
2. Switch to the "Hosts" tab
3. Select the desired VirtualBox host and click on "Edit"
4. In the host wizard confirm the changed certificate and click on "Finish"
The last step is to enable the VirtualBox host again:
5. On the "Hosts" tab select the disabled VirtualBox host and click on "Enable"
At this point the Sun VDI 3.0 system will again balance desktops to the updated VirtualBox host. You can now update the next VirtualBox host in your setup.

How do I find the latest Critical Sun Solaris Patches on Oracle site

Hello
How do I find the latest critical Solaris Patches available to the users. I was searching the list on Oracle's site it's hard to determine which patch is critcal or not. When I type uname -a this is what returns Generic_142909-17.
Any help you could provide would be appreciated.

Sorry, I wrote "Monthly" when I meant to write "Quarterly". Apologies for the confusion. My bad.
From - http://www.oracle.com/technetwork/topics/security/alerts-086861.html
They are released on the Tuesday closest to the 15th day of January, April, July and October. Starting 2011, the scheduled dates for the release of Critical Patch Updates will be on the Tuesday closest to the 17th day of January, April, July and October. The next four dates are:
* 19 April 2011
* 19 July 2011
* 18 October 2011
* 17 January 2012
The CPU for the Solaris Operating System is a rebranded snapshot of the Recommended OS Cluster. The rebranding involves only superficial changes to the patch cluster, with the actual patch content remaining unchanged. The patches contained in this patch cluster are considered the most important and highly recommended patches for Solaris 10. They provide the least amount of change required to address known security, data corruption and availability issues.
If there's a particular CVE Alert which you're vulnerable to or interested in, then the fix will be released within the patch that corresponds to the area of code the vulnerability affects. You can then apply that patch and it's requirements separate to the clusters. Next time you apply the cluster it will either install the latest rev of the patch or skip it if you have the latest installed already.
The Recommended Patch Cluster bundle is a much larger collection of patches and contains all the latest patches (at the time of release) which include Solaris updates, Security, and Sun Alert fixes. Note that we merged "Recommended Patch Cluster/Kernel Jumbo Patchset" and the "Sun Alert Patch Clusters" back in June 2010. See http://blogs.sun.com/patch/entry/merging_the_solaris_recommended_and for more information regarding what happened and why.
Of course there will be a large overlap between the "Recommended OS Cluster" and the "Critical Patch Updates" patchsets will be rolled in to the "Recommended OS Cluster" whenever it's cut and released.
There's a lot of information in the README files for each cluster so you may want to read those to understand the subtle differences.
Regards,
Steve

Sun management software

Hi,
we are looking at sun management software and noticed that it costs about $300+ per client.
what is an alternative to this which is less expensive or free?
what are you other admins doing?
thanks,
~jv

I, too, have been trying to sort out the options and tools for supporting Solaris 9 and 10.
This maybe behond the scope of your question but here is some of what I've uncovered in the last couple of years:
The class Intermediate System Administration (SA 239) has you download the recommended patch cluster and install using ./install_cluster. This works but you will not know which patches will be installed until after the fact. So this process does not support preparing for any changes made by the patches.
The only other process that I have used involve using a non Sun script - pca from http://www.par.univie.ac.at/solaris/pca/intro.html This perl script has many options but the "pretend" option makes it easy to determine which patches will be installed and what revision of the patch is currently installed.
Here are some of the sources I use to try an keep up with patches and other technical details of supporting Solaris
If you have a SunSolve account you can subscribe to email alerts at:
http://sunsolve.sun.com/search/editSubscribedDocuments.do
There are 6 "collections" of "New Documents". I receive a single daily email. The email contains a numbered list (with URLs) for each collection that has New Documents. The collections are:
BUG             (includes bug number and very short description URL)
INFODOC         (includes short description, the INFODOC number is imbedded in the URL)
PATCH           (includes patch number short description/title and URL)
SRDB            (Symptoms and Resolutions - includes short description and URL)
SUNALERT        (including short description and URL)
TROUBLESHOOTING (including short description and URL)Another source for patch information is the SUNSOLVE[SM] PATCH CLUB report (sign up at https://subscriptions.sun.com/subscription_center/ecomm.jsp). This a weekly email with four main sections. The first section has one line for each new patch with a short title/description. The second section has an entry for each patch with more details (includes keywords, synopsis, Solaris Release, bugid's fixed and other details) - but no URLs. The thrid section is a list of Withdrawn patches. The fourth section has an entry for each withdrawn patch that includes reason and recommendation details.
SUN(SM) ALERT WEEKLY SUMMARY REPORT is another source. This one covers "critical hardware and software issues". It includes the Sun Alert ID and URL. Sign up is at the same URL as the Patch Club report above.
have good weekend,
Glen

Sun VDI 3 Patch 2 is now available at SunSolve

Hi folks,
in case you have not noticed it already, we have just released a second patch for Sun VDI 3.0. The patch binaries are available via SunSolve:
[Patch ID 141481-02 (Solaris 10 sparc)|http://sunsolve.sun.com/search/document.do?assetkey=1-21-141481-02-1]
[Patch ID 141482-02 (Solaris 10 x86)|http://sunsolve.sun.com/search/document.do?assetkey=1-21-141482-02-1]
Please notice that due to CR 6856923 ("ESC - Secure authentication disregards the user DN and is actually working as anonymous binding") both patch binaries are flagged as security relevant. This affects customers that use or plan to use secure LDAP authentication for retrieving information from a user directory. A corresponding [Sun Alert (265488)|http://sunsolve.sun.com/search/document.do?assetkey=1-66-265488-1] has been published.
This patch is accompanied with a minor update release of VirtualBox (*VirtualBox 2.0.10*). The updated VirtualBox installer for Solaris 10 is available from the [Sun VDI 3.0 download page|http://www.sun.com/software/vdi/get.jsp]. VirtualBox binaries for other operating systems, for example, for creating desktop templates on your preferred platform, are available here.
This updated VirtualBox version specifically addresses the issue around desktop recycling for non-Windows guest OS, filed as CR 6856906 ("Ubuntu/Opensol desktops does not get recycled on logging out the session"). Customers that want to use desktop recycling for Ubuntu/OpenSolaris desktops must also install the corresponding VirtualBox 2.0.10 guest additions.
Regards, Klaus

The following steps are recommended for updating VirtualBox installations:
1. Login to the Sun VDI administration UI (http://yourserver:1800)
2. Select the affected VirtualBox desktop provider
3. Switch to the "Hosts" tab
4. Select the desired VirtualBox host and click on "Disable"
This ensures that no new desktops/virtual machines will be balanced/started on this host. Please notice, that this will not stop any already running desktops on this host. Thus you either need to ask users to shutdown their desktops or you explicitly trigger the shutdown/power off yourself using the administration UI. After the shutdown, users can immediately request their desktops again - new desktops will automatically be started on the remaining (enabled) VirtualBox hosts (assuming that more than one VirtualBox host is configured in your setup).
5. Download the updated VirtualBox installer from the [Sun VDI 3.0 download page|http://www.sun.com/software/vdi/get.jsp] and extract the archive in a temporary location.
6. Un-install the previous VirtualBox version by triggering # vbox_2.0/vbox-install -u7. Install the new VirtualBox 2.0.10 version by executing # vbox_2.0/vbox-install8. If the installation fails due to an issue with the VirtualBox kernel module, reboot the machine and repeat step 7 again.
The installation of the new VirtualBox version will change the SSL certificate of the web service. Thus you need to re-import the certificate in Sun VDI 3.0 to establish the communication again.
1. In the Sun VDI administration UI select the affected VirtualBox desktop provider.
2. Switch to the "Hosts" tab
3. Select the desired VirtualBox host and click on "Edit"
4. In the host wizard confirm the changed certificate and click on "Finish"
The last step is to enable the VirtualBox host again:
5. On the "Hosts" tab select the disabled VirtualBox host and click on "Enable"
At this point the Sun VDI 3.0 system will again balance desktops to the updated VirtualBox host. You can now update the next VirtualBox host in your setup.

Dashboard Multiple Choice Questions

Hai all
Please answer for the below Mention Questions.
Which are the benefits of using Xcelsius?
     Perform what-if analysis.
     Represent tabular data graphically.
     Identify problems in source data or business assumptions.
     Alert your organization to potential issues and opportunities.
Which element of the Xcelsius interface is used to select and hide components on the canvas?
     Components Browser
     Object Browser
     Property Sheets
Which type of component has drill-down functionality?
     Sliders
     Gauges
     Progress Bars
     Charts
How often is the data in the embedded Excel workbook updated?
     Each time a new cell is selected
     Never
     At customized intervals
     At fixed intervals
According to best practices, why should you color code cells in your embedded Excel workbook?
     In order to conform with the Spread Sheet Standards Association's style guide.
     It makes it easier to find the cells that you want to use in your models.
     Xcelsius automatically selects cells with coloring and converts them into components.
What is the difference between embedded data and connected data models?
     Embedded models use data from file servers; connected models use data from web sites
     Embedded models use data from an embedded Excel workbook; connected models use a data connection to an external data source
     No difference
How do you create a legend in a chart?
     Bind Category axis labels to the cell with the Series name in the General property sheet
     Bind the Legend to the cell with the Series name in the General property sheet
     Bind the entire data range to the legend in the Appearance property sheet
     Select Create Legend from the General property sheet.
     Select Enable Legend from the Appearance property sheet
When binding a chart to non-contiguous data, which binding method should be used?
     Data - By Series
     Data - By Range
     Category Labels
What is the maximum number of cells to which a single value component can be bound in the embedded Excel workbook?
     0
     1
     2
     3
What happens when you bind a single value component to a cell with a formula?
     The single value component behaves like any other component.
     You must change the input options on a Property sheet to make it work.
     The single value component behaves like any other component, but performance of the visualization is degraded.
     Nothing. You cannot bind a single value component to a cell with a formula.
11. If you want to set a maximum value of 50% for a single value component that references a percentage in the source file, what would you do?
Your Ans. Sol- ution Points Please select the correct answer.
     Bind the Common tab of the Behavior property sheet to the value 0.05.
     Bind the Common tab of the Behavior property sheet to the value 50.
     Set a scale limit of 50% on the General property sheet.
     Set a scale limit of 0.5 on the General property sheet.
     Set a scale limit of 0.5 on the Behavior property sheet.
Explanation:
12. What happens if you set up alerts for a multi-series chart?
Your Ans. Sol- ution Points Please select the correct answer.
     The alerts must be set up for each series.
     The same alerts apply for all series.
     The alert setup is automatically determined by the thresholds for the series.
     Nothing. You cannot set up alerts for a multi-series chart.
Explanation:
13. As a best practice when you start designing a dashboard you sketch flow diagrams, mind maps, or simple lists. What best practice questions should you ask yourself from the user's perspective? (Select all that apply.)
Your Ans. Sol- ution Points More than one answer is correct. Please choose the correct answers.
     Who will use the dashboard?
     What tables do they need?
     What decisions or actions will they drive from the dashboard?
     What database(s) will supply the needed data?
     What information will they need to drive action and decisions?
Explanation:
14. Which of the following are valid methods for bringing data from Excel into an Xcelsius model? (Select all that apply.)
Your Ans. Sol- ution Points More than one answer is correct. Please choose the correct answers.
     Copy from Excel and paste into the embedded Excel workbook in Xcelsius
     Import external Excel workbook into embedded Excel workbook
     Enter data manually into the embedded Excel workbook in Xcelsius
     Create a sum formula that points to an Excel workbook outside of Xcelsius
Explanation:
15. Which Property sheet would you use to indicate performance using color coding?
Your Ans. Sol- ution Points Please select the correct answer.
     General
     Drill Down
     Behavior
     Alerts
     Appearance
Explanation:
16. When a selector is used with data insertion, which insertion type is valid?
Your Ans. Sol- ution Points Please select the correct answer.
     Filtered Rows
     Filtered Colums
     Filtered Cells
Explanation:
17. What formats can you use for embedded images that you import into the fish-eye picture menu or the sliding picture menu? (Select all that apply.)
Your Ans. Sol- ution Points More than one answer is correct. Please choose the correct answers.
     BMP
     PNG
     WMV
     SWF
Explanation:
18. How do you create interactive links in your map that will display a chart?
Your Ans. Sol- ution Points Please select the correct answer.
     Include a row or column in the embedded Excel workbook that references the appropriate abbreviations or names for the areas.
     Define the areas in the Behavior tab of the Properties window.
     Set up a series for each geographical area.
     Nothing, Maps are not interactive. You must set up hotspots to link to data in other charts.
Explanation:
19. For which settings do you need to include the specific map areas in alphabetic order along with the data? (Select all that apply.)
Your Ans. Sol- ution Points More than one answer is correct. Please choose the correct answers.
     Source data
     Data Insertion
     Display data
     Alerts target
Explanation:
20. Which data insertion option passes the location of the data in the data range to the selector?
Your Ans. Sol- ution Points Please select the correct answer.
     Value
     Position
     Row
     Status
Explanation:
21. How do you link your data to specific areas in a map?
Your Ans. Sol- ution Points Please select the correct answer.
     Include a row or column in the embedded Excel workbook that references the appropriate abbreviations or names for the areas.
     Define the areas in the Behavior tab of the Properties window.
     Set up a series for each geographical area.
     Nothing. Maps are not interactive; you must set up hotspots to link to data in other charts.
Explanation:
22. Which component offers the drill-down feature?
Your Ans. Sol- ution Points Please select the correct answer.
     Single Value Components
     Selectors
     Charts
     Maps
Explanation:
23. When using dynamic visibility, which is true? (Select all that apply)
Your Ans. Sol- ution Points More than one answer is correct. Please choose the correct answers.
     A component is visible only if the value of the Status field matches the value of the Key field.
     Each component that will have a visibility change associated with the same event should be bound to the same status cell, but each component should be bound to a unique key.
     An Excel formula is required to determine whether components are visible.
     Each component that will have a visibility change associated with the same event should be bound to a unique status cell, but each component should be bound to the same key.
Explanation:
24. What components and functions can be used to toggle dynamic visibility? (Select all that apply.)
Your Ans. Sol- ution Points More than one answer is correct. Please choose the correct answers.
     A cell contained within the destination range specified in a selector
     A VLOOKUP formula within a cell
     A single value component
     A range contained within a destination range specified in a selector
Explanation:
25. On which property sheet can Dynamic Visibility be configured?
Your Ans. Sol- ution Points Please select the correct answer.
     Alerts
     Appearance
     Behavior
     General
Explanation:
26. When testing your model you discover that the dynamic formatting in your Excel workbook does not appear in your published model. What should you do?
Your Ans. Sol- ution Points Please select the correct answer.
     Setup dynamic visibility in your model.
     Remove dynamic formatting from your Excel workbook.
     Make sure that the text object is not hidden in the Object Browser.
     Reformat your Excel workbook cells to avoid using bold.
Explanation:
27. Which are the correct steps for setting up dynamic visibility?
Your Ans. Sol- ution Points Please select the correct answer.
     From the Behavior property sheet, bind Dynamic Visibility Status to a destination range and bind Dynamic Visibility Key to a label.
     From the Behavior property sheet, bind Dynamic Visibility Status to a label and bind Dynamic Visibility Key to a destination range.
     In the Object Browser, place a checkmark under the Eye icon to hide the component.
     From the General property sheet, bind Dynamic Visibility Status to a destination range and bind Dynamic Visibility Key to a label.
     From the General property sheet, bind Dynamic Visibility Status to a label and bind Dynamic Visibility Key to a destination range.
Explanation:
28. Alerts can be enabled for the following components: (Select all that apply)
Your Ans. Sol- ution Points More than one answer is correct. Please choose the correct answers.
     Selectors
     Containers
     Single Value components
     Calendars
Explanation:
29. Which of the following are valid publishing formats for Xcelsius visualizations? (Select all that apply.)
Your Ans. Sol- ution Points More than one answer is correct. Please choose the correct answers.
     SWF embedded in PowerPoint slide
     SWF embedded in Word document
     SWF embedded in ZIP compressed file
     SWF formatted for BusinessObjects Enterprise
Explanation:
30. Management has asked to see a snapshot of the data in the Excel workbook embedded in a published visualization. Of the methods below, which will produce a spreadsheet that contains a snapshot of the data? (Select all that apply.)
Your Ans. Sol- ution Points More than one answer is correct. Please choose the correct answers.
     Switch to Preview mode. From the File menu select Snapshot > Current Excel Data.
     Switch to Design mode. From the Data menu, select Export Current Excel Data.
     Highlight and copy the embedded Excel workbook from the Xcelsius interface and paste into new workbook in Excel.
     Switch to Design mode. From the File menu, select Export Settings > Current Excel Data.
Explanation:
31. Which of the following methods will produce an .XLS file that contains a copy of the data in the .XLF embedded Excel workbook? (Select all that apply.)
Your Ans. Sol- ution Points More than one answer is correct. Please choose the correct answers.
     From the Data menu, select Export.
     From the File menu, select Snapshot > current Excel data.
     From the File menu, select Preview > File > Snapshot > current Excel.
     From the File menu, select Export > Word.
Explanation:
32. Which files created in SAP BusinessObjects Xcelsius Enterprise 2008 can be sent to BusinessObjects Enterprise? (Select all that apply.)
Your Ans. Sol- ution Points More than one answer is correct. Please choose the correct answers.
     XLS (Excel)
     .SWF (Xcelsius Flash)
     .XLF (Xcelsius design)
     .XML (Extensible Markup)
     .HTML (Hypertext Markup)

1.Which are the benefits of using Xcelsius?
2.Which element of the Xcelsius interface is used to select and hide components on the canvas?
3. Which type of component has drill-down functionality?
4. How often is the data in the embedded Excel workbook updated?
5. According to best practices, why should you color code cells in your embedded Excel workbook?
6. What is the difference between embedded data and connected data models?
7. How do you create a legend in a chart?
7. When binding a chart to non-contiguous data, which binding method should be used?
8. What is the maximum number of cells to which a single value component can be bound in the embedded Excel workbook?
9. What happens when you bind a single value component to a cell with a formula?
11. If you want to set a maximum value of 50% for a single value component that references a percentage in the source file, what would you do?
10. What happens if you set up alerts for a multi-series chart?
11. As a best practice when you start designing a dashboard you sketch flow diagrams, mind maps, or simple lists. What best practice questions should you ask yourself
from the user's perspective? (Select all that apply.)
12. Which of the following are valid methods for bringing data from Excel into an Xcelsius model? (Select all that apply.)
13. Which Property sheet would you use to indicate performance using color coding?
14. When a selector is used with data insertion, which insertion type is valid?
15. What formats can you use for embedded images that you import into the fish-eye picture menu or the sliding picture menu? (Select all that apply.)
16. How do you create interactive links in your map that will display a chart?
19. For which settings do you need to include the specific map areas in alphabetic order along with the data? (Select all that apply.)
17. Which data insertion option passes the location of the data in the data range to the selector?
18. How do you link your data to specific areas in a map?
22. Which component offers the drill-down feature?
19. When using dynamic visibility, which is true? (Select all that apply)
20. What components and functions can be used to toggle dynamic visibility? (Select all that apply.)
21. On which property sheet can Dynamic Visibility be configured?
22. When testing your model you discover that the dynamic formatting in your Excel workbook does not appear in your published model. What should you do?
27. Which are the correct steps for setting up dynamic visibility?
28. Alerts can be enabled for the following components: (Select all that apply)
23. Which of the following are valid publishing formats for Xcelsius visualizations? (Select all that apply.)
24. Management has asked to see a snapshot of the data in the Excel workbook embedded in a published visualization. Of the methods below, which will produce a
spreadsheet that contains a snapshot of the data? (Select all that apply.)
25. Which of the following methods will produce an .XLS file that contains a copy of the data in the .XLF embedded Excel workbook? (Select all that apply.)

Please show me what to do per the security upgrades re firefox and ie7

Hi, I didn't know where else to post this. I am just a home user. I have both Firefox 3.0 and Internet Explorer 7. I have windows premium home VISTA.
I recieved the notice (portion below) and the instructions at sun links contained do not give directions which show explicitly what to do regarding each as pertains to BOTH firefox and ie7 browsers, at least in the first one which is all I read and then I registered here for help.
It mentions firefox then shows nothing in what to do for firefox in the first one.
So, can someone please give me step by step on each line item link; what to do to protect my system as regards this latest security notice?
The links are below this text, and I just need a walk thru how to protect my sys as regards the below security notices; exactly what to do for both ie7 and firefox, and my windows is VISTA. Thanks so very much!
I am just a home user with no idea about java as well new to firefox (i use both browsers) as well.
Again, thank you..
US-CERT encourages users to review the following Sun Alerts and applyany necessary updates:
* Sun Alert 238628 - Security Vulnerabilities in the Java RuntimeEnvironment related to the processing of XML Data
* Sun Alert 238666 - A Security Vulnerability with the processing offonts in the Java Runtime Environment may allow Elevation ofPrivileges
* Sun Alert 238687 - Security Vulnerabilities in the Java RuntimeEnvironment Scripting Language Support
* Sun Alert 238905 - Multiple Security Vulnerabilities in Java WebStart may allow Privileges to be Elevated* Sun Alert 238965 - Security Vulnerability in Java ManagementExtensions (JMX)
* Sun Alert 238966 - Security Vulnerability in JDK/JRE Secure StaticVersioning
* Sun Alert 238967 - Security Vulnerability in the Java RuntimeEnvironment Virtual Machine may allow an untrusted Application orApplet to Elevate Privileges
* Sun Alert 238968 - Security Vulnerabilities in the Java RuntimeEnvironment may allow Same Origin
Policy to be Bypassed US-CERT will provide additional information as it becomes available.
Relevant Url(s):
<http://sunsolve.sun.com/search/document.do?assetkey=1-66-238968-1> <http://sunsolve.sun.com/search/document.do?assetkey=1-66-238967-1> <http://sunsolve.sun.com/search/document.do?assetkey=1-66-238628-1> <http://sunsolve.sun.com/search/document.do?assetkey=1-66-238687-1> <http://sunsolve.sun.com/search/document.do?assetkey=1-66-238966-1> <http://sunsolve.sun.com/search/document.do?assetkey=1-66-238905-1> <http://sunsolve.sun.com/search/document.do?assetkey=1-66-238965-1> <http://sunsolve.sun.com/search/document.do?assetkey=1-66-238666-1>
Edited by: rachael35 on Jul 10, 2008 10:10 AM

JoachimSauer wrote:
From a quick glance it seems like a list of vulnerabilities fixed in the latest Java releases.
Just make sure that you've got the latest version of any Java Runtime Environment that you have.
So if you've got Java 6, make sure it's Update 7.
If you've got Java 5, make sure it's Update 16.
You should get the updates automatically, if you don't want to wait for that, just go to [http://www.java.com/] and follow the instructions.
If you've got any earlier versions, get rid of them ;-)Hi, thanks for replying,
I am trying to understand what I need to do. In the first link in the vulnerabiliity list, the link by sun, when go in there, speaks of uninstalling which brings me here:
http://java.com/en/download/help/uninstall_java.xml
Please note that the uninstall at that page does not include VISTA.
I have Vista
Is there another link for uninstalling JAVA which works on Vista?
Thanks!
Edited by: rachael35 on Jul 10, 2008 11:20 AM

Can embedded/private versions of Java be exploited?

I am looking at trying to upgrade the JRE on my clients to the latest secured versions (reference Sun Alert IDs: 102729, 102731, etc.). However, we have a number of private/embedded instances of these older Java versions that were installed with various applications on our Win XP clients (Lotus Notes, UGS, etc.). I am trying to determine if these are vulnerable to the exploits described in these Sun Alerts.
These private Java instances are not registered in the Windows registry under:
HKEY_CLASSES_ROOT\CLSID
As far as I can tell the only way to call a different version of Java from the default JRE that Internet Explorer has registered is to use an "OBJECT classid=�� tag in the web page code. I am assuming that if the private instance of Java has no CLSID in the Windows registry, that it cannot be called by exploitive code.
Is my assumption true? Or is there another way that exploitive code on a web site could call these older private versions of Java?

I am looking at trying to upgrade the JRE on my clients to the latest secured versions (reference Sun Alert IDs: 102729, 102731, etc.). However, we have a number of private/embedded instances of these older Java versions that were installed with various applications on our Win XP clients (Lotus Notes, UGS, etc.). I am trying to determine if these are vulnerable to the exploits described in these Sun Alerts.
These private Java instances are not registered in the Windows registry under:
HKEY_CLASSES_ROOT\CLSID
As far as I can tell the only way to call a different version of Java from the default JRE that Internet Explorer has registered is to use an "OBJECT classid=�� tag in the web page code. I am assuming that if the private instance of Java has no CLSID in the Windows registry, that it cannot be called by exploitive code.
Is my assumption true? Or is there another way that exploitive code on a web site could call these older private versions of Java?

Getting "iPhone needs to cool down" warning while using Apple Maps

I bought the iPhone 6 yesterday and today I used the Apple Maps navigation on it. Not 30 mins into the navigation I got following warning from the phone "iPhone needs to cool down". 30 minutes of GPS usage is not too much. This happened twice. Are other ppl. having the same issue or is it just my phone?
Thanks,
Anupam

Hi, ganupam.
Thank you for visiting Apple Support Communities.
This alert can present itself because of multiple reasons. This article provides an explanation of this alert and some common causes.
Keeping iPhone, iPad, and iPod touch within acceptable operating temperatures
http://support.apple.com/kb/HT2101
If you are still experiencing this issue and feel you need assistance, take a look at the article below.
Contact Apple for support and service
http://support.apple.com/kb/HE57
Cheers,
Jason H.

[svn] 1494: + Copy jgroups.jar to qa-regress/WEB-INF/lib folder

Revision: 1494
Author: [email protected]
Date: 2008-04-30 12:29:37 -0700 (Wed, 30 Apr 2008)
Log Message:
+ Copy jgroups.jar to qa-regress/WEB-INF/lib folder
+ Add a clustered destination to remoting-config.mods.xml for codecoverage
+ Add url-load-balancing,class and default attributes to cluster definition in services-config.mods.xml for codecoverage
checkintests: passed
Modified Paths:
blazeds/trunk/qa/apps/qa-regress/WEB-INF/flex/remoting-config.mods.xml
blazeds/trunk/qa/apps/qa-regress/WEB-INF/flex/services-config.mods.xml
blazeds/trunk/qa/apps/qa-regress/build.xml

Please see following Sun Alert.
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101905-1
The document contains links to the patches that fix this problem.

Unable to boot the sytem after applying kernel patch 118844-27

We have an hp ProLiant DL380 Storage server connected to HP StorageWorks Moduler Smart Array 30 via SCSI. Solaris 03/05 was installed previously on this system with kernel 118844-20. When I queried and installed all required patches with 'smpatch add -i .. ' command, all patches applied and the system is rebooted. After reboot, the system kept restarting. I followed the instructions on Sun Alert document 102087, and installed grub using 01/06 1st CDROM. It installed successfully, but problem persisted. The systems started booting, but before printing 'Configuring devices' the system rebooted again. Providing -v option to the kernel, it lastly printed a PCI device id (/pci@....) and after 2-3 seconds rebooted again.
Finally I had to reinstall the solaris (this time 01/06). The disk was accessible after booting with CD ROM, and I was able to get cylinder numbers of disk, and I installed the new system to the root partition of the other live upgrade environment. The boot disk was partitioned under linux, it was three partitions, Solaris2 (50GB),Solaris(4GB),Linux(18GB). Installation medium told that the fdisk partition was invalid, and i repartitioned the whole disk again.
System up and running Solaris 10 01/06 now, but the strange thing is that, previously hard disk (both boot disk and disks on array) locations were identified as '/dev/rdsk/c0tx' but now, the system sees that hard disks at '/dev/c1tx' and CDROM at '/dev/c0t0'.
Now I want to ask tow questions:
* Could this disk number change made the system unbootable previously?
* May I safely apply patch 118844-28 to the system
-Thanks

Here's a similar topic https://bbs.archlinux.org/viewtopic.php?pid=536210 also if that doesn't work you should install vesa as it also says it's not found in your log.

Explanation of Sun Alert ID: 101770

Similar Messages

Maybe you are looking for