PT-2005-4781 · Sun · Sun Java System Messaging Server

Publicado 2005-12-07 · Atualizado 2011-05-19 · CVE-2005-4045

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sun Java System Messaging Server 2005Q1

Description The issue allows remote attackers to obtain the Top-Level Administrator (TLA) default password via unknown vectors, possibly involving configure toplevel admin.ldif.

Recommendations For Sun Java System Messaging Server 2005Q1, consider changing the default Top-Level Administrator (TLA) password to prevent unauthorized access. As a temporary workaround, restrict access to the configure toplevel admin.ldif file until a more permanent solution is available.

Correção

Identificadores relacionados

CVE-2005-4045

Produtos afetados

Sun Java System Messaging Server

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2005-4045 · Nota de Segurança
• http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102068-1 · Correção, Aviso do Fabricante
• http://secunia.com/advisories/17889 · Aviso do Fabricante
• http://vupen.com/english/advisories/2005/2754 · Aviso do Fabricante
• http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000831.1-1 · Aviso do Fabricante
• http://securitytracker.com/id?1015313 · Nota
• http://securityfocus.com/bid/15733 · Nota