BID:35961

Sun Java System Access Manager CDCServlet Component Information Disclosure Vulnerability

Info

Sun Java System Access Manager CDCServlet Component Information Disclosure Vulnerability

Bugtraq ID:	35961
Class:	Unknown
CVE:	CVE-2009-2713
Remote:	Yes
Local:	No
Published:	Aug 05 2009 12:00AM
Updated:	Apr 13 2015 09:08PM
Credit:	The vendor disclosed this issue.
Vulnerable:	Sun Java System Access Manager 7.1 Windows Sun Java System Access Manager 7.1 Solaris x86 Sun Java System Access Manager 7.1 Solaris SPARC Sun Java System Access Manager 7.1 Linux Sun Java System Access Manager 7.0 2005Q4 Windows Sun Java System Access Manager 7.0 2005Q4 Solaris x Sun Java System Access Manager 7.0 2005Q4 Solaris S Sun Java System Access Manager 7.0 2005Q4 Linux Sun Java System Access Manager 7.0 2005Q4 HP-UX

Not Vulnerable:

Discussion

Sun Java System Access Manager CDCServlet Component Information Disclosure Vulnerability

Sun Java System Access Manager is prone to a remote information-disclosure vulnerability.

Attackers can exploit this issue to obtain potentially sensitive information that may aid in further attacks.

This issue affects Sun Java System Access Manager 7.1 and 7 2005Q4 (7.0).

Exploit / POC

Sun Java System Access Manager CDCServlet Component Information Disclosure Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Solution / Fix

Sun Java System Access Manager CDCServlet Component Information Disclosure Vulnerability

Solution:
The vendor has released an advisory and fixes. Please see the references for details.

Sun Java System Access Manager 7.0 2005Q4 Windows