Description
IBM WebSphere Application Server 5.0.2 (or any earlier cumulative fix) and 5.1.1 (or any earlier cumulative fix) allows EJB access on Solaris systems via a crafted LTPA token.
References
- PK19195 vendor-advisory
- 25375 vdb-entry
- http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006881
- http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006879
- 910 third-party-advisory
- ADV-2006-1736 vdb-entry
- ADV-2006-2552 vdb-entry
- 20032 third-party-advisory
- 20060509 IBM Websphere Application Server Multiple Vulnerabilities mailing-list