Sign Up for Your FREE Weekly SecurityTracker E-mail Alert Summary
|
|
|
|
|
|
|
Put SecurityTracker Vulnerability Alerts on Your Web Site -- It's Free!
|
|
|
|
Become a Partner and License Our Database or Notification Service
|
|
|
|
|
|
|
|
|
|
|
|
|
Sun Directory Server Unspecified Bug Lets Remote Users Compromise the System
|
|
SecurityTracker Alert ID: 1015014 |
|
SecurityTracker URL: http://securitytracker.com/id/1015014
|
|
CVE Reference:
CVE-2005-3269
(Links to External Site)
|
Updated: Nov 23 2005
|
Original Entry Date: Oct 6 2005
|
Impact:
User access via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): 5.2 Patch 3 and prior versions
|
Description:
A vulnerability was reported in Sun Directory Server. A remote user can compromise the target system.
A remote user can exploit the HTTP administrative interface to execute arbitrary commands with the privileges of the admin server process (which are typically root user privileges).
Peter Winter-Smith of NGSSoftware discovered this vulnerability.
|
Impact:
A remote user can compromise the target system.
|
Solution:
Sun has issued a fixed version (5.2 Patch 4), available at the following URLs.
For Solaris (SPARC):
http://sunsolve.sun.com/search/document.do?assetkey=1-21-117665-03-1
For Solaris (x86):
http://sunsolve.sun.com/search/document.do?assetkey=1-21-117666-03-1
For Windows:
http://sunsolve.sun.com/search/document.do?assetkey=1-21-117667-03-1
For Linux:
http://sunsolve.sun.com/search/document.do?assetkey=1-21-117668-03-1
For Red Hat Enterprise Linux 2.1:
http://sunsolve.sun.com/search/document.do?assetkey=1-21-118079-10-1
Sun's advisory is available at:
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102002-1
The following patches are available:
For Packaged Versions:
SPARC Platform
* Sun ONE Administration Server 5.2 (for Solaris 8, 9, and 10) with patch 115610-23 or later
* Sun Java System Directory Server 5.2 2003Q4, 2004Q2, and 2005Q1 (for Solaris 8, 9, and 10) with patch 115614-26 or later
* Sun Java System Directory Proxy Server 5.2 2003Q4, 2004Q2, and 2005Q1 (for Solaris 8, 9, and 10) with patch 116373-18 or later
x86 Platform
* Sun ONE Administration Server 5.2 (for Solaris 9 and 10) with patch 115611-23 or later
* Sun Java System Directory Server 5.2 2003Q4, 2004Q2, and 2005Q1 (for Solaris 8, 9, and 10) with patch 115615-26 or later
* Sun Java System Directory Proxy Server 5.2 2003Q4, 2004Q2, and 2005Q1 (for Solaris 8, 9, and 10) with patch 116374-14 or later
Linux
* Sun ONE Administration Server 5.2 (for RHEL2.1) with patch 118079-10 or later
* Sun Java System Directory Server 5.2 2003Q4, 2004Q2, and 2005Q1 with patch 118080-11 or later
* Sun Java System Directory Proxy Server 5.2 2003Q4, 2004Q2, and 2005Q1 with patch 118096-08 or later
For zip compressed archives:
Sun Java System Directory Server 5.2 (to upgrade from 5.2 RTM ZIP or 5.2 Patch2 ZIP or 5.2 Patch3 ZIP ):
* Solaris 8, 9, and 10 on the SPARC Platform with patch 117665-03 or later
* Solaris 8, 9 and 10 on the x86 Platform with patch 117666-03 or later
* Linux with patch 117668-03 or later
* Windows with patch 117667-03 or later
* HP-UX with patch 117669-03 or later
* AIX with patch 117670-03 or later
A final resolution is pending.
|
Vendor URL: sunsolve.sun.com/search/document.do?assetkey=1-26-102002-1 (Links to External Site)
|
Cause:
Not specified
|
Underlying OS:
Linux (Any), UNIX (Solaris - SunOS), Windows (Any)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Thu, 06 Oct 2005 12:00:09 +0100
Subject: High Risk Vulnerability in Sun Directory Server
|
Peter Winter-Smith of NGSSoftware has discovered high risk vulnerability in
Sun Directory Server. This flaw can permit an unauthenticated attacker to
remotely compromise the Directory server.
Affected versions include:
Sun Directory Server 5.2 (patch 3 and below)
This issue has been resolved in the latest patch released for Sun Directory
Server (patch 4), which may be downloaded from SunSolve:
http://sunsolve.sun.com
NGSSoftware are going to withhold details of this flaw for three months.
Full details will be published on the 05th January 2006. This three month
window will allow users of Sun Directory Server the time needed to apply the
patch before the details are released to the general public. This reflects
NGSSoftware's approach to responsible disclosure.
NGSSoftware Insight Security Research
http://www.ngssoftware.com
http://www.databasesecurity.com/
http://www.nextgenss.com/
+44(0)208 401 0070
|
|
Go to the Top of This SecurityTracker Archive Page
|
