A security vulnerability in the Online Help feature of Sun Java System Directory Server 5.2 may allow a local or remote unprivileged user to determine if particular files or directories exist on the system. In certain cases, a single line of a file's contents may be revealed as well.

Sun acknowledges with thanks, the National Australia Bank's Security Assurance Team for for the discovery and reporting of this vulnerability.

Permalink |