CVE-2006-4175

Currently unrated

Key Information:

Vendor
Oracle
Status
Java System Directory Server
One Directory Server
Vendor
CVE Published:
26 March 2007

Summary

The LDAP server (ns-slapd) in Sun Java System Directory Server 5.2 Patch4 and earlier and ONE Directory Server 5.1 and 5.2 allows remote attackers to cause a denial of service (crash) via malformed queries, probably malformed BER queries, which trigger a free of uninitialized memory locations.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/33189
vdb-entryx_refsource_XF
http://www.vupen.com/english/advisories/2007/1090
vdb-entryx_refsource_VUPEN
http://www.osvdb.org/33524
vdb-entryx_refsource_OSVDB

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.