----------------------------------------------------------------------

Secunia Network Software Inspector 2.0 (NSI) - Public Beta

2 days left of beta period.

The 1st generation of the Secunia Network Software Inspector (NSI)
has been available for corporate users for almost 1 year and its been
a tremendous success.

The 2nd generation Secunia NSI is built on the same technology as the
award winning Secunia PSI, which has already been downloaded and
installed on more than 400,000 computers world wide.

Learn more / Download (instant access):
http://secunia.com/network_software_inspector_2/

----------------------------------------------------------------------

TITLE:
Sun Java System Directory Server "bind-dn" Security Bypass

SECUNIA ADVISORY ID:
SA29978

VERIFY ADVISORY:
http://secunia.com/advisories/29978/

CRITICAL:
Highly critical

IMPACT:
Security Bypass

WHERE:
>From remote

SOFTWARE:
Sun Java System Directory Server Enterprise Edition (DSEE) 6.x
http://secunia.com/product/14528/

DESCRIPTION:
Sun has acknowledged a vulnerability in Sun Java System Directory
Server, which can be exploited by malicious people to bypass certain
security restrictions.

The vulnerability is caused due to an unspecified error when
classifying connections based on "bind-dn", which can be exploited
gain administrative access.

The vulnerability is reported in Sun Java System Directory Server
6.0, 6.1, 6.2, Enterprise Edition for all platforms (Solaris 8, 9,
and 10 SPARC and x86 Platforms, Linux, Windows, and HP-UX).

SOLUTION:
Update to version 6.3.

-- Native Package Versions --

Solaris 9 and 10 SPARC:
Apply patch 125276-07 or later

Solaris 9 x86:
Apply patch 125277-07 or later   

Solaris 10 x86 and x64:
Apply patch 125278-07 or later

Linux:
Apply patch 125309-07 or later

-- PatchZIP (Compressed Archive) versions --

Solaris 9 and 10 SPARC:
Apply patch 126748-04 or later

Solaris 9 x86:
Apply patch 126749-04 or later

Solaris 10 x86 and x64:
Apply patch 126750-04 or later

Linux:
Apply patch 126751-04 or later

Windows:
Apply patch 126753-04 or later

HP-UX:
Apply patch 126752-04 or later

PROVIDED AND/OR DISCOVERED BY:
Reported by the vendor.

ORIGINAL ADVISORY:
http://sunsolve.sun.com/search/document.do?assetkey=1-66-235381-1

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------