Sun Java System Directory Proxy Server Remote Unauthorized Access Vulnerability

Bugtraq ID:	28941
Class:	Access Validation Error
CVE:	CVE-2008-1995
Remote:	Yes
Local:	No
Published:	Apr 26 2008 12:00AM
Updated:	May 07 2015 05:29PM
Credit:	The vendor disclosed this issue.
Vulnerable:	Sun Directory Server Enterprise Edition 6.2 Sun Directory Server Enterprise Edition 6.1 Sun Directory Server Enterprise Edition 6.0
Not Vulnerable:	Sun Directory Server Enterprise Edition 6.3

Sun Java System Directory Proxy Server Remote Unauthorized Access Vulnerability

Sun Java System Directory Proxy Server is prone to a remote unauthorized-access vulnerability.

Attackers can exploit this issue to gain unauthorized administrative access to the affected server.

Sun Java System Directory Proxy Server Remote Unauthorized Access Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sun Java System Directory Proxy Server Remote Unauthorized Access Vulnerability

Solution:
The vendor has released an advisory and fixes. Please see the references for details.

Sun Java System Directory Proxy Server Remote Unauthorized Access Vulnerability

References:

• Sun Directory Proxy Server Home Page (Sun)
  
• Sun Java System Directory Server Homepage (Sun)
  
• 235381: Security Vulnerability in Sun Java System Directory Proxy Server May Gra (Sun)