Denial of Service Vulnerability in Sun Java System Directory Server by Sun Microsystems
CVE-2006-4175

Currently unrated

Key Information:

Vendor

Oracle
Status
Java System Directory Server
One Directory Server
Vendor
CVE Published:
26 March 2007

What is CVE-2006-4175?

The LDAP server component (ns-slapd) of Sun Java System Directory Server versions 5.2 Patch4 and earlier, as well as ONE Directory Server 5.1 and 5.2, is susceptible to a Denial of Service attack. Remote attackers can exploit this vulnerability by sending malformed queries, particularly malformed BER queries. This exploit can trigger a crash of the server due to the improper handling of uninitialized memory locations, potentially disrupting services and affecting availability.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/33189
vdb-entryx_refsource_XF
http://www.vupen.com/english/advisories/2007/1090
vdb-entryx_refsource_VUPEN
http://www.osvdb.org/33524
vdb-entryx_refsource_OSVDB

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.