Sun Java System Directory Server Attributes List Information Disclosure Vulnerability
BID:24467
Info
Sun Java System Directory Server Attributes List Information Disclosure Vulnerability
| Bugtraq ID: | 24467 |
| Class: | Design Error |
| CVE: |
CVE-2007-3224 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 13 2007 12:00AM |
| Updated: | May 07 2015 05:37PM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
Sun ONE Directory Server 5.2 patch 4 Sun ONE Directory Server 5.2 patch 3 Sun ONE Directory Server 5.2 Sun ONE Directory Server 5.1 Sun Java System Directory Server 5.2 Patch2 Sun Java System Directory Server 5.2 2005Q4 Sun Java System Directory Server 5.2 2005Q1 Sun Java System Directory Server 5.2 2004Q2 Sun Java System Directory Server 5.2 2003Q4 Sun Directory Server Enterprise Edition 6.0 Blue Coat Systems Policy Center 8.7 Blue Coat Systems Policy Center 8.6 Blue Coat Systems Policy Center 0 |
| Not Vulnerable: |
Blue Coat Systems Policy Center 8.7.2 |
Discussion
Sun Java System Directory Server Attributes List Information Disclosure Vulnerability
Sun Java System Directory Server is prone to an information-disclosure vulnerability.
An attacker can exploit this issue to access sensitive information that may lead to other attacks.
This issue affects these versions:
Sun ONE Directory Server 5.2
Sun Java System Directory Server 5
Sun Java Directory Server Enterprise Edition (DSEE) 6.0.
Sun Java System Directory Server is prone to an information-disclosure vulnerability.
An attacker can exploit this issue to access sensitive information that may lead to other attacks.
This issue affects these versions:
Sun ONE Directory Server 5.2
Sun Java System Directory Server 5
Sun Java Directory Server Enterprise Edition (DSEE) 6.0.
Exploit / POC
Sun Java System Directory Server Attributes List Information Disclosure Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Sun Java System Directory Server Attributes List Information Disclosure Vulnerability
Solution:
The vendor has released an advisory and fixes to address this issue. Please see the referenced advisory for more information.
Solution:
The vendor has released an advisory and fixes to address this issue. Please see the referenced advisory for more information.
References
Sun Java System Directory Server Attributes List Information Disclosure Vulnerability
References:
References:
- 102876: Security Vulnerability in Sun Java System Directory Server Leaks Informa (Sun Microsystems)
- Sun Homepage (Sun Microsystems )
- January 10, 2012 - Multiple Sun ONE Directory Server vulnerabilities in PolicyCe (Blue Coat Systems)