int(3226)

Vulnerability Bulletins


Compromiso root en Sun Java System Directory Server

Vulnerability classification

Property Value
Confidence level Oficial
Impact Compromiso Root
Dificulty Experto
Required attacker level Acceso remoto sin cuenta a un servicio estandar

System information

Property Value
Affected manufacturer UNIX
Affected software Sun Java System Directory Server 5.2
Sun Java System Directory Server Enterprise Edition

Description

Se ha encontrado una vulnerabilidad en Sun Java System Directory Server. La vulnerabilidad reside en un error no especificado.

Un atacante remoto podría obtener acceso con privilegios root y realizar modificaciones específicas en el directorio del servidor.

Solution



Actualización de software

Sun (102875)
Sun Java System Directory Server 5 / Sun Java System Directory Server 5.2 / Solaris / SPARC / Patch 5
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-115614-27-1
Sun Java System Directory Server 5 / Sun Java System Directory Server 5.2 / Solaris / x86 / Patch 5
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-115615-27-1
Sun Java System Directory Server 5 / Sun Java System Directory Server 5.2 / Linux / Patch 5
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-118080-12-1
Sun Java System Directory Server 5 / Sun Java System Directory Server 5.2 / HP-UX / Patch 5
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-121393-02-1
Sun Java System Directory Server 5 / Sun Java System Directory Server 5.2 / Windows / Patch 5
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-121392-03-1
Sun Java System Directory Server Enterprise Edition 6.1 / Solaris / SPARC
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-125276-02-1
Sun Java System Directory Server Enterprise Edition 6.1 / Solaris 9 / x86
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-125277-02-1
Sun Java System Directory Server Enterprise Edition 6.1 / Solaris 10 / x86 / x64
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-125278-02-1
Sun Java System Directory Server Enterprise Edition 6.1 / Linux
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-125309-02-1
Sun Java System Directory Server Enterprise Edition 6.1 / HP-UX
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-125310-02-1

Standar resources

Property Value
CVE
BID

Other resources

Sun Alert Notification (102875)
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102875-1

Version history

Version Comments Date
1.0 Aviso emitido 2007-06-14
Ministerio de Defensa
CNI
CCN
CCN-CERT