Vulnerability Bulletins |
Obtención de accesso en Sun Java System Access Manager |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Obtener acceso |
| Dificulty | Experto |
| Required attacker level | Acceso remoto con cuenta |
System information |
|
| Property | Value |
| Affected manufacturer | Comercial Software |
| Affected software |
Sun Java System Access Manager 2004Q2 Sun Java System Access Manager 6 2005Q1 Sun Java System Identity Server 6.1 |
Description |
|
|
Se ha encontrado una vulnerabilidad en Sun Java System Access Manager. La vulnerabilidad reside cuando el nivel de debug se encuentra en "message" ya que al autenticarse los usuarios y las contraseñas podrían circular en texto plano. Un atacante local podría obtener acceso. |
|
Solution |
|
|
Actualización de software Sun(101918) Sun One Identity Server 6.1 / SPARC / Solaris 8 / Solaris 9 / patch 117586-16 Sun Java System Access Manager 6.2 / SPARC / Solaris 8 / Solaris 9 / patch 115766-09 Sun Java System Access Manager 6 / SPARC / Solaris 9 / patch 119465-02 Sun Java System Access Manager 6 / SPARC / Solaris 9 / patch 119466-02 Sun Java System Access Manager 6 / SPARC / Solaris 10 / patch 119465-09 Sun Java System Access Manager 6.2 / x86 / Solaris 8 / Solaris 9 / patch 120091-09 Sun Java System Access Manager 6 / x86 / Solaris 9 / patch 119465-02 Sun Java System Access Manager 6 / x86 / Solaris 9 / patch 119467-02 Sun Java System Access Manager 6 / x86 / Solaris 10 / patch 119467-09 Sun Java System Acess Manager 6.2 / Linux / patch 119409-09 Sun Java System Access Manager 6 / Linux (RHEL2.1) / patch 119502-02 De momento, no existe parche oficial para esta vulnerabilidad. http://sunsolve.sun.com/pub-cgi/show.pl?target=patchpage |
|
Standar resources |
|
| Property | Value |
| CVE | |
| BID | |
Other resources |
|
|
Sun Alert Notification (101918) http://sunsolve.sun.com/search/document.do?assetkey=1-26-101918-1 |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2007-07-12 |