PT-2005-4081 · Red Hat+1 · Red Hat Directory Server+4
Peter Winter-Smith
·
Published
2005-10-20
·
Updated
2017-07-11
·
CVE-2005-3269
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Sun Java System Directory Server versions 5.2 2003Q4 through 5.2 2005Q1
Red Hat Directory Server (affected versions not specified)
Certificate Server versions prior to 7.1 SP1
Sun ONE Directory Server versions 5.1 SP4 and earlier
Sun ONE Administration Server version 5.2
Description
The issue is a stack-based buffer overflow in the help.cgi component of the HTTP administrative interface. This can be exploited by remote attackers to cause a denial of service, resulting in the admin server crashing. Local users can also exploit this issue to gain root privileges.
Recommendations
For Sun Java System Directory Server versions 5.2 2003Q4 through 5.2 2005Q1, update to a version later than 5.2 2005Q1.
For Red Hat Directory Server, contact the vendor for a fix.
For Certificate Server versions prior to 7.1 SP1, update to version 7.1 SP1 or later.
For Sun ONE Directory Server versions 5.1 SP4 and earlier, update to a version later than 5.1 SP4.
For Sun ONE Administration Server version 5.2, update to a version later than 5.2.
Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Certificate Server
Red Hat Directory Server
Sun Java System Directory Server
Sun One Administration Server
Sun One Directory Server