A security issue has been reported in Sun Solaris, which can be exploited by malicious, local users to gain knowledge of sensitive information.

The problem is that the Directory Server rootDN (Distinguished Name) password may be disclosed to local users when a privileged users runs the idsconfig command or certain LDAP commands (ldapadd, ldapdelete, ldapmodify, ldapmodrdn, and ldapsearch).

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
The vendor credits Michael Gerdts.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102113-1

Deep Links
Links available to Secunia VIM customers