OSVDB ID: 24563

Title: Solaris LDAP2 idsconfig rootDN Password Local Disclosure

Info

Disclosure

Apr 11, 2006

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Solaris contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when the idsconfig utility in the LDAP2 suite is manipulated in such a way to disclose the rootDN (Directory Server root Distinguished Name). No further details have been provided.

Classification

Location: Local Access Required
Attack Type: Information Disclosure
Impact: Loss of Confidentiality
Exploit: Exploit Rumored
Disclosure: OSVDB Verified

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, Sun Microsystems has released a patch to address this vulnerability.

Products

Sun Microsystems, Inc.

Solaris

8
9

References

Credit

  • Michael Gerdts -


Direct URL: http://osvdb.org/24563