Sun Java System Directory Server Remote Unauthorized Access Vulnerability

TITLE: Sun Java System Directory Server Remote Unauthorized Access Vulnerability
CLASS: Access Validation Error
CVE:
REMOTE: Yes
LOCAL: No
PUBLISHED: Jun 13 2007 12:00AM
UPDATE: Jun 14 2007 07:19PM
CREDIT: The vendor disclosed this issue.
VULNERABLE:

Sun Java System Directory Server 5.2 Patch4
Sun Java System Directory Server 5.2 Patch3
Sun Java Directory Server Enterprise Edition 6.0
NOT VULNERABLE:

Vai alla pagina originale su Security Focus

Discussion

Sun Java System Directory Server is prone to a remote unauthorized-access vulnerability.

Attackers can exploit this issue to gain unauthorized access and perform certain modifications to the data on the directory server.

Exploit

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:vuldb@securityfocus.com.

Solution

Solution:
The vendor has released an advisory and fixes to address this issue. Please see the references for details.


Sun Java System Directory Server 5.2 Patch4


Sun Java System Directory Server 5.2 Patch3

Sun Java Directory Server Enterprise Edition 6.0

References

References:

PhpLog

BNLug Benevento Linux Users Group