Vulnerability CVE-2009-2713 - CERT Civis.Net

Vulnerability Name:

CVE-2009-2713 (CCN-52295)

Assigned:

2009-08-05

Published:

2009-08-05

Updated:

2009-08-15

Summary:

The CDCServlet component in Sun Java System Access Manager 7.0 2005Q4 and 7.1, when Cross Domain Single Sign On (CDSSO) is enabled, does not ensure that "policy advice" is presented to the correct client, which allows remote attackers to obtain sensitive information via unspecified vectors.

CVSS v3 Severity:

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): None Availibility (A): None

CVSS v2 Severity:

4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N)
3.2 Low (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): None

4.3 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N)
3.2 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): None

Vulnerability Type:

Vulnerability Consequences:

Obtain Information

References:

Source: MITRE
Type: CNA
CVE-2009-2713

Source: CCN
Type: SA36167
Sun Java System Access Manager CDCServlet Component Information Disclosure

Source: SECUNIA
Type: Vendor Advisory
36167

Source: CONFIRM
Type: Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-03-1

Source: CCN
Type: Sun Alert ID: 255968
Security Vulnerability in Sun Java System Access Manager May Provide Security Information to the Wrong Client

Source: SUNALERT
Type: Vendor Advisory
255968

Source: CCN
Type: OSVDB ID: 56816
Sun Java System Access Manager CDCServlet Component CDSSO Unspecified Information Disclosure

Source: BID
Type: Patch
35961

Source: CCN
Type: BID-35961
Sun Java System Access Manager CDCServlet Component Information Disclosure Vulnerability

Source: VUPEN
Type: UNKNOWN
ADV-2009-2176

Source: XF
Type: UNKNOWN
jsam-cdcservlet-info-disclosure(52295)

Vulnerable Configuration:

Configuration 1:

cpe:/a:sun:java_system_access_manager:6.3_2005q1:*:solaris_10_sparc:*:*:*:*:*

OR cpe:/a:sun:java_system_access_manager:6.3_2005q1:*:solaris_8_sparc:*:*:*:*:*

OR cpe:/a:sun:java_system_access_manager:6.3_2005q1:*:solaris_9_sparc:*:*:*:*:*

OR cpe:/a:sun:java_system_access_manager:7.1:*:solaris_10_sparc:*:*:*:*:*

OR cpe:/a:sun:java_system_access_manager:7.1:*:solaris_8_sparc:*:*:*:*:*

OR cpe:/a:sun:java_system_access_manager:7.1:*:solaris_9_sparc:*:*:*:*:*

OR cpe:/a:sun:java_system_access_manager:7_2005q4:*:solaris_10_sparc:*:*:*:*:*

OR cpe:/a:sun:java_system_access_manager:7_2005q4:*:solaris_8_sparc:*:*:*:*:*

OR cpe:/a:sun:java_system_access_manager:7_2005q4:*:solaris_9_sparc:*:*:*:*:*

Configuration 2:

cpe:/a:sun:java_system_access_manager:6.3_2005q1:*:solaris_10_x86:*:*:*:*:*

OR cpe:/a:sun:java_system_access_manager:6.3_2005q1:*:solaris_8_x86:*:*:*:*:*

OR cpe:/a:sun:java_system_access_manager:6.3_2005q1:*:solaris_9_x86:*:*:*:*:*

OR cpe:/a:sun:java_system_access_manager:7.1:*:solaris_10_x86:*:*:*:*:*

OR cpe:/a:sun:java_system_access_manager:7.1:*:solaris_8_x86:*:*:*:*:*

OR cpe:/a:sun:java_system_access_manager:7.1:*:solaris_9_x86:*:*:*:*:*

OR cpe:/a:sun:java_system_access_manager:7_2005q4:*:solaris_10_x86:*:*:*:*:*

OR cpe:/a:sun:java_system_access_manager:7_2005q4:*:solaris_8_x86:*:*:*:*:*

OR cpe:/a:sun:java_system_access_manager:7_2005q4:*:solaris_9_x86:*:*:*:*:*

Configuration 3:

cpe:/a:sun:java_system_access_manager:6.3_2005q1:*:solaris_10_linux:*:*:*:*:*

OR cpe:/a:sun:java_system_access_manager:6.3_2005q1:*:solaris_8_linux:*:*:*:*:*

OR cpe:/a:sun:java_system_access_manager:6.3_2005q1:*:solaris_9_linux:*:*:*:*:*

OR cpe:/a:sun:java_system_access_manager:7.1:*:solaris_10_linux:*:*:*:*:*

OR cpe:/a:sun:java_system_access_manager:7.1:*:solaris_8_linux:*:*:*:*:*

OR cpe:/a:sun:java_system_access_manager:7.1:*:solaris_9_linux:*:*:*:*:*

OR cpe:/a:sun:java_system_access_manager:7_2005q4:*:solaris_10_linux:*:*:*:*:*

OR cpe:/a:sun:java_system_access_manager:7_2005q4:*:solaris_8_linux:*:*:*:*:*

OR cpe:/a:sun:java_system_access_manager:7_2005q4:*:solaris_9_linux:*:*:*:*:*

Configuration 4:

cpe:/a:sun:java_system_access_manager:7.0_2005q4:*:windows:*:*:*:*:*

OR cpe:/a:sun:java_system_access_manager:7.1:*:windows:*:*:*:*:*

Configuration 5:

cpe:/a:sun:java_system_web_server:7.0:*:hp_ux:*:*:*:*:*

Configuration 6:

cpe:/a:sun:java_system_access_manager:7.1:*:war:*:*:*:*:*

Configuration CCN 1:

cpe:/a:sun:java_system_access_manager:7.1:*:*:*:*:*:*:*

OR cpe:/a:sun:java_system_access_manager:7.0_2005q4:*:*:*:*:*:*:*

AND

cpe:/o:sun:solaris:8::x86:*:*:*:*:*

OR cpe:/o:sun:solaris:8::sparc:*:*:*:*:*

OR cpe:/o:sun:solaris:9::x86:*:*:*:*:*

OR cpe:/o:sun:solaris:10::sparc:*:*:*:*:*

OR cpe:/o:sun:solaris:10::x86:*:*:*:*:*

OR cpe:/o:sun:solaris:9::sparc:*:*:*:*:*

Denotes that component is vulnerable