CVE-2009-1083

CWE-94 — Code Injection5 documents4 sources
Severity
9.0CRITICAL
EPSS
1.7%
top 17.58%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
SUN Java System Identity Manager
Timeline
PublishedMar 25
Latest updateMay 2

Description

Sun Java System Identity Manager (IdM) 7.0 through 8.0 on Linux, AIX, Solaris, and HP-UX permits "control characters" in the passwords of user accounts, which allows remote attackers to execute arbitrary commands via vectors involving "resource adapters."

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 8.0 | Impact: 10.0

Affected Packages1 packages

Patches

Patch: blogs.sun.com ↗Patch: sunsolve.sun.com ↗Patch: sunsolve.sun.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-v7w5-9782-qx92: Sun Java System Identity Manager (IdM) 7↗2022-05-02
▶
CVEList
CVE-2009-1083: Sun Java System Identity Manager (IdM) 7↗2009-03-25
▶

💬Community

1
Bugzilla
CVE-2009-1196 cups: DoS (stop, crash) by renewing CUPS browse packets↗2009-04-22
▶