CVEvulnerability
CVE-2005-3269
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-10-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in help.cgi in the HTTP administrative interface for (1) Sun Java System Directory Server 5.2 2003Q4, 2004Q2, and 2005Q1, (2) Red Hat Directory Server and (3) Certificate Server before 7.1 SP1, (4) Sun ONE Directory Server 5.1 SP4 and earlier, and (5) Sun ONE Administration Server 5.2 allows remote attackers to cause a denial of service (admin server crash), or local users to gain root privileges.
Affected configurations
• sun java system directory proxy server 5.2
• sun java system directory server 5.2
• sun one administration server 5.2
• sun one directory server 4.16
• sun one directory server 5.0
• sun one directory server 5.0 sp2
• sun one directory server 5.1
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://marc.info/?l=bugtraq&m=112862037500012&w=2 marc.info
- http://marc.info/?l=bugtraq&m=113815459026080&w=2 marc.info
- http://secunia.com/advisories/17092 Vendor Advisory
- http://secunia.com/advisories/18590 Vendor Advisory
- http://securityreason.com/securityalert/367 securityreason.com
- http://securityreason.com/securityalert/51 securityreason.com
- http://securitytracker.com/id?1015014 securitytracker.com
- http://securitytracker.com/id?1015536 securitytracker.com
- http://securitytracker.com/id?1015537 securitytracker.com
- http://securitytracker.com/id?1015538 securitytracker.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-117665-03-1 Patch
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102002-1 sunsolve.sun.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-228419-1 sunsolve.sun.com
- http://www.securityfocus.com/bid/15013 www.securityfocus.com
- http://www.securityfocus.com/bid/16345 www.securityfocus.com
- http://www.vupen.com/english/advisories/2005/1988 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24311 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=112862037500012&w=2 marc.info
- http://marc.info/?l=bugtraq&m=113815459026080&w=2 marc.info
- http://secunia.com/advisories/17092 Vendor Advisory
- http://secunia.com/advisories/18590 Vendor Advisory
- http://securityreason.com/securityalert/367 securityreason.com
- http://securityreason.com/securityalert/51 securityreason.com
- http://securitytracker.com/id?1015014 securitytracker.com
- http://securitytracker.com/id?1015536 securitytracker.com
- http://securitytracker.com/id?1015537 securitytracker.com
- http://securitytracker.com/id?1015538 securitytracker.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-117665-03-1 Patch
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102002-1 sunsolve.sun.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-228419-1 sunsolve.sun.com
- http://www.securityfocus.com/bid/15013 www.securityfocus.com
- http://www.securityfocus.com/bid/16345 www.securityfocus.com
- http://www.vupen.com/english/advisories/2005/1988 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24311 exchange.xforce.ibmcloud.com