CVE-2009-1083

CRÍTICO 9.0CVE-2009-1083 · Published 25/03/2009 · updated 16/06/2026

En resumen

CVE-2009-1083 es una vulnerabilidad CRÍTICO (CVSS 9.0) que afecta a java system identity manager (sun).
Probabilidad de explotación en los próximos 30 días (EPSS): 3.7%, mayor que el 89.7% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
java system identity manager sun	`= 7.0= 7.1= 7.1.1= 8.0`	No fix yet

Description

Sun Java System Identity Manager (IdM) 7.0 through 8.0 on Linux, AIX, Solaris, and HP-UX permits "control characters" in the passwords of user accounts, which allows remote attackers to execute arbitrary commands via vectors involving "resource adapters."

References

blogs.sun.com/security/entry/sun_alert_253267_sun_java · Patch
secunia.com/advisories/34380 · Vendor Advisory
securitytracker.com/id
sunsolve.sun.com/search/document.do · Patch
sunsolve.sun.com/search/document.do · Patch
securityfocus.com/bid/34191
vupen.com/english/advisories/2009/0797 · Vendor Advisory

Más vulnerabilidades de java system identity manager

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

java system identity manager

sun

= 7.0= 7.1= 7.1.1= 8.0

No fix yet

Más vulnerabilidades de java system identity manager

Ver todo →