PT-2005-4781 · Sun · Sun Java System Messaging Server

Published 2005-12-07 · Updated 2011-05-19 · CVE-2005-4045

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sun Java System Messaging Server 2005Q1

Description The issue allows remote attackers to obtain the Top-Level Administrator (TLA) default password via unknown vectors, possibly involving configure toplevel admin.ldif.

Recommendations For Sun Java System Messaging Server 2005Q1, consider changing the default Top-Level Administrator (TLA) password to prevent unauthorized access. As a temporary workaround, restrict access to the configure toplevel admin.ldif file until a more permanent solution is available.

Fix

Related Identifiers

CVE-2005-4045

Affected Products

Sun Java System Messaging Server

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2005-4045 · Security Note
• http://secunia.com/advisories/17889 · Vendor Advisory
• http://vupen.com/english/advisories/2005/2754 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000831.1-1 · Vendor Advisory
• http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102068-1 · Patch, Vendor Advisory
• http://securitytracker.com/id?1015313 · Note
• http://securityfocus.com/bid/15733 · Note