Sun warns of new security holes

Powered by SC Magazine
 

Sun is advising administrators to updater their software after a vulnerability was detected in the company's Java System Identity Manager software.

The company said that some nine issues within its indentity management offering would be resolved by the update.

Among the vulnerabilities patched by the flaw include the ability to intercept data transfers and remotely execute code with administrator rights.

Other vulnerabilities include multiple cross-site scripting flaws and a vulnerability which could potentially allow an unauthorised user to erase and overwrite passwords.

The update affects versions 7.0, 7.1, 7.1.1 and 8.0 of the Sun Java System Identity Manager software.

Version 8.1 is not believed to be affected by any of the vulnerabilities and administrators running those systems will not need to apply the patch. Sun said that administrators can check their version of the software by the "help" tab when in the software's administration console screen.

Other than applying the patch, the company did not list any further resolutions for the issues or suggestions on mitigating the risk from the vulnerabilities.

No other Sun products or components are affected by the update.


 
 
 
Top Stories
How hard do you hack back?
[Blog post] Taking the offensive could have unintended consequences.
 
Five zero-cost ways to improve MySQL performance
How to easily boost MySQL throughput by up to 5x.
 
The big winners from Defence’s back-office IT refresh
Updated: The full list of subcontractors.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
Which is the most prevalent cyber attack method your organisation faces?




   |   View results
Phishing and social engineering
  68%
 
Advanced persistent threats
  3%
 
Unpatched or unsupported software vulnerabilities
  11%
 
Denial of service attacks
  6%
 
Insider threats
  12%
TOTAL VOTES: 1013

Vote