iPlanet/Sun Java Messaging Server Local Information Disclosure Vulnerability

Bugtraq ID:	18749
Class:	Access Validation Error
CVE:	CVE-2006-3159
Remote:	No
Local:	Yes
Published:	Jun 30 2006 12:00AM
Updated:	Jun 28 2007 02:48AM
Credit:	php0t is credited with the discovery of this vulnerability.
Vulnerable:	Sun Java System Messaging Server 6 2005Q1 Sun Java System Messaging Server 6.2 Sun Java System Messaging Server 6.1 Sun Java System Messaging Server 6.0 Sun iPlanet Messaging Server 5.2 Sun iPlanet Messaging Server 5.2 Patch 1
Not Vulnerable:

iPlanet/Sun Java Messaging Server Local Information Disclosure Vulnerability

iPlanet Messaging Server and Sun Java Messaging Server are prone to a local information-disclosure vulnerability. This issue occurs because the application returns part of the configuration file if an error occurs.

An attacker can exploit this issue to retrieve potentially sensitive information that may aid in further attacks.

iPlanet/Sun Java Messaging Server Local Information Disclosure Vulnerability

Attackers use standard system utilities to exploit this issue.

iPlanet/Sun Java Messaging Server Local Information Disclosure Vulnerability

Solution:
The vendor has released T-patches to address this issue.

Please see the referenced advisories for more information.

iPlanet/Sun Java Messaging Server Local Information Disclosure Vulnerability

References:

• iPlanet Product Homepage (Sun Netscape Alliance)
  
• Sun Alert ID: 102496 - Security Vulnerability May Allow a Local Unprivileged Use (Sun)
  
• Sun iPlanet Messaging Server 5.2 root password compromise (php0t)
  
• Sun Java System Messaging Server (Sun)