Sun Java System Directory Server Information Disclosure Vulnerability

Bugtraq ID:	34548
Class:	Unknown
CVE:	CVE-2009-1332
Remote:	Yes
Local:	No
Published:	Apr 15 2009 12:00AM
Updated:	Apr 13 2015 08:09PM
Credit:	National Australia Bank's Security Assurance Team
Vulnerable:	Sun Java System Directory Server Enterprise Edition 5 Sun Java System Directory Server 5.2 Blue Coat Systems Policy Center 8.7 Blue Coat Systems Policy Center 8.6 Blue Coat Systems Policy Center 0
Not Vulnerable:	Sun Java System Directory Server Enterprise Edition 6.0 Blue Coat Systems Policy Center 8.7.2

Sun Java System Directory Server Information Disclosure Vulnerability

Sun Java System Directory Server is prone to a remote information-disclosure vulnerability.

Attackers can exploit this issue to obtain potentially sensitive information that may aid in further attacks.

The following are vulnerable:

Sun Java System Directory Server Enterprise Edition 5
Sun Java System Directory Server 5.2

Sun Java System Directory Server Information Disclosure Vulnerability

Attackers may use client utilities to exploit this issue.

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sun Java System Directory Server Information Disclosure Vulnerability

Solution:
The vendor has released an advisory and fixes. Please see the references for details.

Sun Java System Directory Server Information Disclosure Vulnerability

References:

• Sun Java System Directory Server Homepage (Sun)
  
• 255848 A Security Vulnerability in the Sun Java System Directory Server (Sun)
  
• January 10, 2012 - Multiple Sun ONE Directory Server vulnerabilities in PolicyCe (Blue Coat Systems)