From: Secunia Security Advisories (sec-advsecunia.com)
Date: Mon Jul 03 2006 - 04:47:05 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

----------------------------------------------------------------------

Reverse Engineer Wanted

Secunia offers a Security Specialist position with emphasis on
reverse engineering of software and exploit code, auditing of
source code, and analysis of vulnerability reports.

http://secunia.com/secunia_security_specialist/

----------------------------------------------------------------------

TITLE:
Sun Java System Messaging Server Arbitrary File Disclosure

SECUNIA ADVISORY ID:
SA20919

VERIFY ADVISORY:
http://secunia.com/advisories/20919/

CRITICAL:
Less critical

IMPACT:
Exposure of sensitive information

WHERE:
Local system

SOFTWARE:
Sun Java System Messaging Server 6.x
http://secunia.com/product/4225/
Sun ONE Messaging Server 5.x (formerly iPlanet)
http://secunia.com/product/1709/

DESCRIPTION:
A vulnerability has been reported in Sun Java System Messaging Server
/ iPlanet Messaging Server, which can be exploited by malicious, local
users to gain knowledge of potentially sensitive information.

The vulnerability is caused due to an unspecified error and can be
exploited by local users to partially read arbitrary files.

SOLUTION:
The vendor recommends restricting shell account access on the mail
server to trusted users only.

PROVIDED AND/OR DISCOVERED BY:
Reported by the vendor.

ORIGINAL ADVISORY:
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102496-1

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/

Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]