Peter Winter-Smith has reported a vulnerability in Sun ONE/Sun Java System Directory Server, Sun Java System Directory Proxy Server, and Sun ONE Administration Server, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an unspecified error in the HTTP admin interface. This can be exploited to execute arbitrary code with root privileges on a vulnerable system.

The vulnerability has been reported in the following products.
* Sun Java System Directory Proxy Server 5.2
* Sun Java System Directory Server 5.2
* Sun ONE Directory Server 5.1
* Sun ONE Administration Server 5.2

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
Peter Winter-Smith, NGSSoftware

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102002-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-228419-1

Deep Links
Links available to Secunia VIM customers