Description
Unspecified vulnerability in Solaris 8 and 9 allows local users to obtain the LDAP Directory Server root Distinguished Name (rootDN) password when a privileged user (1) runs idsconfig; or "insecurely" runs LDAP2 commands with the -w option, including (2) ldapadd, (3) ldapdelete, (4) ldapmodify, (5) ldapmodrdn, and (6) ldapsearch.
References
- 24565 vdb-entry
- 102113 vendor-advisory
- 19638 third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2006-122.htm
- 24563 vdb-entry
- 24568 vdb-entry
- 24567 vdb-entry
- ADV-2006-1334 vdb-entry
- 17479 vdb-entry
- oval:org.mitre.oval:def:1840 vdb-entry signature
- 1015903 vdb-entry
- 21493 third-party-advisory
- 24566 vdb-entry
- solaris-ldap2-password-disclosure(25747) vdb-entry
- 24564 vdb-entry