CVE-2009-1083

CRITICO 9.0CVE-2009-1083 · Published 25/03/2009 · updated 16/06/2026

In breve

CVE-2009-1083 è una vulnerabilità CRITICO (CVSS 9.0) che riguarda java system identity manager (sun).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 3.7%, superiore al 89.7% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
java system identity manager sun	`= 7.0= 7.1= 7.1.1= 8.0`	No fix yet

Description

Sun Java System Identity Manager (IdM) 7.0 through 8.0 on Linux, AIX, Solaris, and HP-UX permits "control characters" in the passwords of user accounts, which allows remote attackers to execute arbitrary commands via vectors involving "resource adapters."

References

blogs.sun.com/security/entry/sun_alert_253267_sun_java · Patch
secunia.com/advisories/34380 · Vendor Advisory
securitytracker.com/id
sunsolve.sun.com/search/document.do · Patch
sunsolve.sun.com/search/document.do · Patch
securityfocus.com/bid/34191
vupen.com/english/advisories/2009/0797 · Vendor Advisory

Altre vulnerabilità di java system identity manager

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

java system identity manager

sun

= 7.0= 7.1= 7.1.1= 8.0

No fix yet

Altre vulnerabilità di java system identity manager

Vedi tutto →