CVE-2007-3700 | BDVDB-2026-25235 Detail
Description#
Sun Java System Access Manager (formerly Java System Identity Server) before 20070710, when the message debug level is configured in the com.iplanet.services.debug.level property in AMConfig.properties, logs cleartext login passwords, which allows local users to gain privileges by reading /var/opt/SUNWam/debug/amAuth.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.securityfocus.com/bid/24859
- http://www.vupen.com/english/advisories/2007/2496
- http://secunia.com/advisories/26030
- http://osvdb.org/37249
- http://www.securitytracker.com/id?1018370
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-101918-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-200386-1
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35339
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.