CVE-2006-1782: Low severity Sun SunOS vulnerability

Published Apr 13, 2006

Updated

Unspecified vulnerability in Solaris 8 and 9 allows local users to obtain the LDAP Directory Server root Distinguished Name (rootDN) password when a privileged user (1) runs idsconfig; or "insecurely" runs LDAP2 commands with the -w option, including (2) ldapadd, (3) ldapdelete, (4) ldapmodify, (5) ldapmodrdn, and (6) ldapsearch.

Affected Software

2 affected components

Sun SunOS=5.8

Sun Solaris=9.0

Event History

Apr 13, 2006

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-1782?

CVE-2006-1782 has a medium severity rating due to the potential for unauthorized access to sensitive information.

How do I fix CVE-2006-1782?

To fix CVE-2006-1782, ensure that LDAP commands are not run with the -w option in an insecure manner and limit access to the idsconfig utility.

Who is affected by CVE-2006-1782?

CVE-2006-1782 affects local users on Solaris 8 and 9 systems, particularly those using the LDAP Directory Server.

What type of attack does CVE-2006-1782 enable?

CVE-2006-1782 enables local users to obtain the LDAP Directory Server root Distinguished Name password through insecure command usage.

Is there a workaround for CVE-2006-1782?

A workaround for CVE-2006-1782 includes restricting the execution of LDAP commands to trusted users only.