Stack-based Buffer Overflow in Sun and Red Hat Directory Servers
CVE-2005-3269

Currently unrated

Key Information:

Vendor

Oracle
Status
One Administration Server
One Directory Server
Java System Directory Server
Java System Directory Proxy Server
Vendor
CVE Published:
20 October 2005

What is CVE-2005-3269?

The vulnerability in help.cgi within the HTTP administrative interface for certain versions of Sun Java System Directory Server, Red Hat Directory Server, and Certificate Server can be exploited by remote attackers. It allows them to trigger a stack-based buffer overflow, resulting in a denial of service through an application crash. Furthermore, local users may exploit this vulnerability to gain root privileges, posing a serious risk to system integrity and security. Users are advised to update their systems to mitigate this risk.

References

http://securitytracker.com/id?1015538
vdb-entryx_refsource_SECTRACK
http://marc.info/?l=bugtraq&m=112862037500012&w=2
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/15013
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.