CVE-2005-4045 Unspecified vulnerability in System Communications Services 6 Delegated Administrator 2005Q1 in Sun Java System Messaging Server 2005Q1 allows remote attackers to obtain the Top-Level Administrator (T...

HighCVSS 7.5 EPSS 2.6%

Published: 2005-12-07 13:00
Updated: 2026-06-17 01:18
Exploit status: No public exploit known

Description

Unspecified vulnerability in System Communications Services 6 Delegated Administrator 2005Q1 in Sun Java System Messaging Server 2005Q1 allows remote attackers to obtain the Top-Level Administrator (TLA) default password via unknown vectors, possibly involving configure_toplevel_admin.ldif.

Affected products

Product	Affected versions	Fixed in
sun java communications services delegated administrator	= 6-2005q1	No fix listed

References

17889 patch third-party-advisory vendor-advisory
1015313 vdb-entry
1000831 vendor-advisory
102068 patch vendor-advisory
15733 vdb-entry
ADV-2005-2754 vdb-entry vendor-advisory

CVSS v2.0

7.5 High

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: Partial

Weakness & likelihood

EPSS (exploitation probability, 30 days): 2.61% (percentile 85.6)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.