Oracle Access Manager/OpenSSO CVE-2009-3763 Authentication Remote Vulnerability

Bugtraq ID:	41633
Class:	Unknown
CVE:	CVE-2009-3763
Remote:	Yes
Local:	No
Published:	Jul 13 2010 12:00AM
Updated:	Jul 13 2010 12:00AM
Credit:	Oracle
Vulnerable:	Sun OpenSSO Enterprise 8.0 Sun OpenSSO Enterprise 0 Sun Java System Access Manager 7.1 Windows Sun Java System Access Manager 7.1 Solaris x86 Sun Java System Access Manager 7.1 Solaris SPARC Sun Java System Access Manager 7.1 Linux Sun Java System Access Manager 7.1 HP-UX Sun Java System Access Manager 7.0 2005Q4 Windows Sun Java System Access Manager 7.0 2005Q4 Solaris x Sun Java System Access Manager 7.0 2005Q4 Solaris S Sun Java System Access Manager 7.0 2005Q4 Linux Sun Java System Access Manager 7.0 2005Q4 HP-UX
Not Vulnerable:

Oracle Access Manager/OpenSSO CVE-2009-3763 Authentication Remote Vulnerability

Oracle Access Manager/OpenSSO is prone to a remote vulnerability.

The vulnerability can be exploited over the 'HTTP' protocol. The 'Authentication' sub component is affected.

This vulnerability affects the following supported versions:
7.1, 7 2005Q4, OpenSSO Enterprise 8.0

Oracle Access Manager/OpenSSO CVE-2009-3763 Authentication Remote Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Oracle Access Manager/OpenSSO CVE-2009-3763 Authentication Remote Vulnerability

Solution:
Vendor updates are available. Please contact the vendor for more information.

Oracle Access Manager/OpenSSO CVE-2009-3763 Authentication Remote Vulnerability

References:

• Oracle Critical Patch Update Advisory - July 2010 (Oracle)