The login module in Sun Java System Access Manager 6 2005Q1 (aka 6.3), 7 2005Q4 (aka 7.0), and 7.1 responds differently to a failed login attempt depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.

Sun Java System Access Manager 7.1 Solaris_x86.
Date this patch was last updated by Sun : Apr/23/11

AM 7.0_x86: Sun Java System Access Manager 2005Q4.
Date this patch was last updated by Sun : Nov/03/10

Sun Java(TM) System Access Manager 6 2005Q1.
Date this patch was last updated by Sun : Jun/29/09

Sun Java System Access Manager 7.1 Solaris.
Date this patch was last updated by Sun : Apr/23/11

AM 7.0: Sun Java System Access Manager 2005Q4.
Date this patch was last updated by Sun : Nov/03/10

The remote host is running a version of Sun Java System Access Manager 7.1 earlier than Patch 2. Such versions are potentially affected by multiple issues : 

  - A vulnerability may allow unauthorized access to resources by revealing passwords to remote users who have privileges to access the administration console. (1-66-242166-1)

  - A sub-realm administrator may be able to escalate their privileges and access the root realm as an administrator. (1-66-249106-1)

  - A username-enumeration weakness could allow an attacker to determine valid user-names. (1-66-242026-1)

The remote host is running Sun OpenSSO, or Sun Java System Access Manager as it was previously known, an enterprise-class product that provides web access management, federation, and web services security. 

The version of the Login module included with Sun OpenSSO / Sun Java System Access Manager on the remote host allows an unauthenticated, remote attacker to enumerate users during the login phase using specially crafted requests.

ID	Name	Product	Family	Severity
107950	Solaris 10 (x86) : 126357-06	Nessus	Solaris Local Security Checks	critical
107871	Solaris 10 (x86) : 120955-12	Nessus	Solaris Local Security Checks	critical
107821	Solaris 10 (x86) : 119465-17	Nessus	Solaris Local Security Checks	medium
107450	Solaris 10 (sparc) : 126356-06	Nessus	Solaris Local Security Checks	critical
107369	Solaris 10 (sparc) : 120954-12	Nessus	Solaris Local Security Checks	critical
107318	Solaris 10 (sparc) : 119465-17	Nessus	Solaris Local Security Checks	medium
5132	Sun Java System Access Manager 7.1 < Patch 2 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	medium
38005	Solaris 9 (x86) : 120955-12	Nessus	Solaris Local Security Checks	critical
37533	Solaris 9 (sparc) : 120954-12	Nessus	Solaris Local Security Checks	critical
37271	Solaris 8 (sparc) : 120954-12	Nessus	Solaris Local Security Checks	critical
35618	Sun OpenSSO / Java System Access Manager Login Module User Account Enumeration Weakness	Nessus	CGI abuses	medium
23611	Solaris 9 (x86) : 119465-17	Nessus	Solaris Local Security Checks	medium
23553	Solaris 9 (sparc) : 119465-17	Nessus	Solaris Local Security Checks	medium
23466	Solaris 8 (x86) : 119465-17	Nessus	Solaris Local Security Checks	medium
23415	Solaris 8 (sparc) : 119465-17	Nessus	Solaris Local Security Checks	medium

Detections

Analytics

CVE-2009-0348

medium

Tenable Plugins

critical

critical

medium

critical

critical

medium

medium

critical

critical

critical

medium

medium

medium

medium

medium