Sun Java System Access Manager (formerly Java System Identity Server) before 20070710, when the message debug level is configured in the com.iplanet.services.debug.level property in AMConfig.properties, logs cleartext login passwords, which allows local users to gain privileges by reading /var/opt/SUNWam/debug/amAuth.

Sun Java(TM) System Access Manager 6 2005Q1.
Date this patch was last updated by Sun : Jun/29/09

Sun Java(TM) System Access Manager 6 2005Q1.
Date this patch was last updated by Sun : Jun/29/09

This plugin has been deprecated and either replaced with individual 119465 patch-revision plugins, or deemed non-security related.

ID	Name	Product	Family	Severity
107821	Solaris 10 (x86) : 119465-17	Nessus	Solaris Local Security Checks	medium
107318	Solaris 10 (sparc) : 119465-17	Nessus	Solaris Local Security Checks	medium
23611	Solaris 9 (x86) : 119465-17	Nessus	Solaris Local Security Checks	medium
23553	Solaris 9 (sparc) : 119465-17	Nessus	Solaris Local Security Checks	medium
23466	Solaris 8 (x86) : 119465-17	Nessus	Solaris Local Security Checks	medium
23415	Solaris 8 (sparc) : 119465-17	Nessus	Solaris Local Security Checks	medium
22989	Solaris 10 (x86) : 119465-17 (deprecated)	Nessus	Solaris Local Security Checks	medium
22956	Solaris 10 (sparc) : 119465-17 (deprecated)	Nessus	Solaris Local Security Checks	medium

Detections

Analytics

CVE-2007-3700

high

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium