Vulnerability Bulletins |
Aumento de privilegios en Sun Java System Access Manager |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Aumento de privilegios |
| Dificulty | Experto |
| Required attacker level | Acceso remoto sin cuenta a un servicio estandar |
System information |
|
| Property | Value |
| Affected manufacturer | Comercial Software |
| Affected software |
Sun Java System Access Manager 7.1 Sun Java System Access Manager 7 2005Q4 (7.0) |
Description |
|
|
Se ha descubierto una vulnerabilidad en Sun Java System Access Manager. La vulnerabilidad reside en un error relacionado con el componente CDCServlet. Un atacante remoto podría obtener acceso no autorizado mediante métodos no determinados. |
|
Solution |
|
|
Actualización de software Sun (255968) SPARC Sun Java System Access Manager 7.1 (for Solaris 8, 9 and 10) with patch 126356-03 o posterior Sun Java System Access Manager 7 2005Q4 (for Solaris 8, 9 and 10) with patch 120954-10 o posterior x86 Platform Sun Java System Access Manager 7.1 (for Solaris 8, 9 and 10) with patch 126357-03 o posterior Sun Java System Access Manager 7 2005Q4 (for Solaris 9 and 10) with patch 120955-10 o posterior Linux Sun Java System Access Manager 7.1 with patch 126358-03 o posterior Sun Java System Access Manager 7 2005Q4 with patch 120956-10 o posterior Windows Sun Java System Access Manager 7.1 with patch 126359-03 o posterior Sun Java System Access Manager 7 2005Q4 with patch 124296-10 o posterior HP-UX Sun Java System Access Manager 7 2005Q4 with patch 126371-10 o posterior Other Sun Java System Access Manager 7.1 WAR file-based installation (all platforms) with patch 140504-03 o posterior http://sunsolve.sun.com/pub-cgi/show.pl?target=patchpage Red Hat (RHSA-2009:1615-1) RHEL Desktop Workstation (v. 5 cliente) Red Hat Enterprise Linux (v. 5 servidor) Red Hat Enterprise Linux Desktop (v. 5 cliente) Red Hat Enterprise Linux EUS (v. 5.4.z servidor) https://rhn.redhat.com/ |
|
Standar resources |
|
| Property | Value |
| CVE | |
| BID | |
Other resources |
|
|
Sun Alert Notification (255968) http://sunsolve.sun.com/search/document.do?assetkey=1-66-255968-1 |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2009-08-10 |