Info

Disclosure

Dec 12, 2006

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Jan 31, 2007

Description

Classification

Attack Type: Input Manipulation
Exploit: Exploit Private
Disclosure: Vendor Verified

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, Sun Microsystems has released a patch to address this vulnerability.

Products

Unknown or Incomplete

References

Security Tracker: 1017376
CVE ID: 2006-6494 (see also: NVD)
Bugtraq ID: 21564
Secunia Advisory ID: 23317 23991
SCIP VulDB ID: 2743
Related OSVDB ID: 30842
ISS X-Force ID: 30849
VUPEN Advisory: ADV-2006-4979
Mail List Post: http://archives.neohapsis.com/archives/fulldisclosure/2006-12/0238.html
Other Advisory URL: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=449
http://support.avaya.com/elmodocs2/security/ASA-2007-019.htm
Vendor Specific Advisory URL: http://sunsolve.sun.com/search/document.do?assetkey=1-26-102724-1

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/30843