A vulnerability has been reported in iPlanet Messaging Server / Sun ONE Messaging Server, which can be exploited by malicious people to conduct script insertion attacks.

The vulnerability is caused due to an unspecified input validation error and allows execution of arbitrary HTML and script code in a user's browser session in context of a vulnerable site when a malicious e-mail is viewed.

Successful exploitation reportedly requires that Internet Explorer is used for viewing the malicious e-mail.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
Reported by vendor.

Original Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-57691-1

Deep Links
Links available in Customer Area