Sun Java System LDAP JDK Search Feature Information Disclosure Vulnerability
BID:31905
Info
Sun Java System LDAP JDK Search Feature Information Disclosure Vulnerability
| Bugtraq ID: | 31905 |
| Class: | Access Validation Error |
| CVE: |
CVE-2008-4747 |
| Remote: | No |
| Local: | Yes |
| Published: | Oct 23 2008 12:00AM |
| Updated: | Apr 16 2015 05:52PM |
| Credit: | Sun |
| Vulnerable: |
Sun Java System LDAP JDK 4.19 Sun Java System Access Manager 7.1 Windows Sun Java System Access Manager 7.1 Solaris x86 Sun Java System Access Manager 7.1 Solaris SPARC Sun Java System Access Manager 7.1 Linux Sun Java System Access Manager 7.1 HP-UX Sun Java System Access Manager 7.0 2005Q4 Windows Sun Java System Access Manager 7.0 2005Q4 Solaris x Sun Java System Access Manager 7.0 2005Q4 Solaris S Sun Java System Access Manager 7.0 2005Q4 Linux Sun Java System Access Manager 7.0 2005Q4 HP-UX Sun Java System Access Manager 6 2005Q1 Windows Sun Java System Access Manager 6 2005Q1 Solaris x86 Sun Java System Access Manager 6 2005Q1 Solaris SPA Sun Java System Access Manager 6 2005Q1 Linux |
| Not Vulnerable: |
Sun Java System LDAP JDK 4.20 |
Discussion
Sun Java System LDAP JDK Search Feature Information Disclosure Vulnerability
Sun Java System LDAP JDK is prone to an information-disclosure issue because it fails to restrict access to potentially sensitive information.
Attackers can exploit this issue to obtain information that may aid in further attacks.
The following applications are vulnerable:
Sun Java System LDAP JDK 4.19 and prior versions
Sun Java System Access Manager 7 2005Q4
Sun Java System Access Manager 7.1
Sun Java System Access Manager 6 2005Q1
Sun Java System LDAP JDK is prone to an information-disclosure issue because it fails to restrict access to potentially sensitive information.
Attackers can exploit this issue to obtain information that may aid in further attacks.
The following applications are vulnerable:
Sun Java System LDAP JDK 4.19 and prior versions
Sun Java System Access Manager 7 2005Q4
Sun Java System Access Manager 7.1
Sun Java System Access Manager 6 2005Q1
Exploit / POC
Sun Java System LDAP JDK Search Feature Information Disclosure Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Sun Java System LDAP JDK Search Feature Information Disclosure Vulnerability
Solution:
The vendor has released fixes. Please see the references for more information.
Solution:
The vendor has released fixes. Please see the references for more information.
References
Sun Java System LDAP JDK Search Feature Information Disclosure Vulnerability
References:
References: