int(3118)

Vulnerability Bulletins


Obtención de acceso en Sun Java System Web Server

Vulnerability classification

Property Value
Confidence level Oficial
Impact Obtener acceso
Dificulty Experto
Required attacker level Acceso remoto sin cuenta a un servicio estandar

System information

Property Value
Affected manufacturer Comercial Software
Affected software Sun Java System Web Server 6.0
Sun Java System Web Server 6.1

Description

Se ha descubierto una vulnerabilidad en Sun Java System Web Server. La vulnerabilidad reside en un error no especificado.

Un atacante local o remoto podría ganar acceso no autorizado a datos almacenados en la máquina que utiliza Sun Java System Web Server bajo ciertas circunstancias.

Solution



Actualización de software

Sun(102833)
Sun Java System Web Server 6.0 / SPARC / Service Pack 11
http://www.sun.com/download/products.xml?id=459db7b2
Sun Java System Web Server 6.1 / SPARC / Service Pack 7
http://www.sun.com/download/products.xml?id=45c90ca9
Sun Java System Web Server 6.1 / SPARC / patch 116648-19
Sun Java System Web Server 6.1 / x86 / Service Pack 7
http://www.sun.com/download/products.xml?id=45c90ca9
Sun Java System Web Server 6.1 / x86 / patch 116649-19
Sun Java System Web Server 6.0 / Linux / Service Pack 11
http://www.sun.com/download/products.xml?id=459db7b2
Sun Java System Web Server 6.1 / Linux / Service Pack 7
http://www.sun.com/download/products.xml?id=45c90ca9
Sun Java System Web Server 6.1 / Linux / patch 118202-11
Sun Java System Web Server 6.0 / AIX / Service Pack 11
http://www.sun.com/download/products.xml?id=459db7b2
Sun Java System Web Server 6.1 / AIX / Service Pack 7
http://www.sun.com/download/products.xml?id=45c90ca9
Sun Java System Web Server 6.0 / HP-UX / Service Pack 11
http://www.sun.com/download/products.xml?id=459db7b2
Sun Java System Web Server 6.1 / HP-UX / Service Pack 7
http://www.sun.com/download/products.xml?id=45c90ca9
Sun Java System Web Server 6.0 / Windows / Service Pack 11
http://www.sun.com/download/products.xml?id=459db7b2
Sun Java System Web Server 6.1 / Windows / Service Pack 7
Sun Java System Web Server 6.1 / HP-UX / patch 121510-03
Sun Java System Web Server 6.1 / Windows / patch 121524-03
http://sunsolve.sun.com/pub-cgi/show.pl?target=patchpage

Standar resources

Property Value
CVE
BID

Other resources

Sun Alert Notification (102833)
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102833-1

Version history

Version Comments Date
1.0 Aviso emitido 2007-04-25
1.1 Aviso actualizado por Sun (102833) 2007-06-01
Ministerio de Defensa
CNI
CCN
CCN-CERT