Sun Java System Directory Server Unspecified Remote Vulnerability

[Vassily]

 FrSIRT Advisory : FrSIRT/ADV-2005-1988
CVE Reference : GENERIC-MAP-NOMATCH
Rated as : High Risk
Remotely Exploitable : Yes
Locally Exploitable : Yes
Release Date : 2005-10-07

 * Technical Description *

A vulnerability has been identified in Sun Java System Directory Server, which could be exploited by remote attackers to gain unauthorized access and execute arbitrary commands. This flaw is due to an unspecified error in the HTTP admin interface that does not properly handle specially crafted requests, which could be exploited by remote attackers to compromise a vulnerable system. No further details have been disclosed.

 * Affected Products *

Sun Java System Directory Server version 5.2 patch 3 and prior

 * Solution *

Apply patch 4 :

Para ver este enlace Registrate o Inicia Sesion

 * References *


Para ver este enlace Registrate o Inicia Sesion

Para ver este enlace Registrate o Inicia Sesion

 * Credits *

Vulnerability reported by Peter Winter-Smith

 * ChangeLog *

2005-10-07 : Original Advisory