← Database

CVE-2009-1083

CRITICAL CVSS: 9.0 Published: 2009-03-25 Modified: 2026-06-16

Description

Sun Java System Identity Manager (IdM) 7.0 through 8.0 on Linux, AIX, Solaris, and HP-UX permits "control characters" in the passwords of user accounts, which allows remote attackers to execute arbitrary commands via vectors involving "resource adapters."

Affected Platforms

Sun Java System Identity Manager

Weakness Type

CWE-94

References