Sun Java System Access Manager Policy Agent Denial of Service Vulnerability

Bugtraq ID:	35788
Class:	Unknown
CVE:	CVE-2009-2597
Remote:	Yes
Local:	No
Published:	Jul 23 2009 12:00AM
Updated:	Aug 21 2009 03:45PM
Credit:	Jason Jones of Inner Security Ltd
Vulnerable:	Sun Java System Access Manager Policy Agent 2.2
Not Vulnerable:

Sun Java System Access Manager Policy Agent Denial of Service Vulnerability

Sun Java System Access Manager Policy Agent is prone to a vulnerability that may allow attackers to cause denial-of-service conditions.

Sun Java System Access Manager Policy Agent 2.2 is vulnerable.

Sun Java System Access Manager Policy Agent Denial of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sun Java System Access Manager Policy Agent Denial of Service Vulnerability

Solution:
The vendor has released a patch. Please see the references for details.


Sun Java System Access Manager Policy Agent 2.2

• Sun 141248-01
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-141248-01-1

Sun Java System Access Manager Policy Agent Denial of Service Vulnerability

References:

• Sun Java System Access Manager Policy Agent Homepage (Sun)
  
• A Security Vulnerability in the Sun Java System Access Manager Policy Agent May (Sun)