int(5282)

Vulnerability Bulletins


Vulnerabilidad en Sun Java System Access Manager

Vulnerability classification

Property Value
Confidence level Oficial
Impact Integridad
Dificulty Experto
Required attacker level Acceso remoto sin cuenta a un servicio estandar

System information

Property Value
Affected manufacturer Comercial Software
Affected software Sun Java System Access Manager 7.0
Sun Java System Access Manager 7.1
OpenSSO Enterprise 8.0

Description

Se ha descubierto una vulnerabilidad en Sun Java System Access Manager.

Un atacante remoto podría comprometer la integridad y confidencialidad mediante métodos no especificados.

Solution



Actualización de software

Oracle
SPARC Platform
Sun Java System Access Manager 7 2005Q4
Sun Java System Access Manager 7.1
x86 Platform
Sun Java System Access Manager 7
Sun Java System Access Manager 7.1
Linux Platform
Sun Java System Access Manager 7
Sun Java System Access Manager 7.1
Windows Platform
Sun Java System Access Manager 7
Sun Java System Access Manager 7.1
HP-UX
Sun Java System Access Manager 7
Other
Sun Java System Access Manager 7.1 WAR file-based installation patch 140504-04
OpenSSO Enterprise 8.0

Standar resources

Property Value
CVE CVE-2010-0894
BID 39457

Other resources

Sun Alert Notification
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020934.1-1

Version history

Version Comments Date
1.0 Aviso emitido 2010-05-21
Ministerio de Defensa
CNI
CCN
CCN-CERT