Remote Denial of Service Vulnerability in Sun Java System and Sun ONE Directory Servers
CVE-2007-2466

Currently unrated

Key Information:

Vendor

Oracle
Status
Java System Directory Server
One Directory Server
Vendor
CVE Published:
2 May 2007

What is CVE-2007-2466?

An unspecified vulnerability exists in the LDAP Software Development Kit (SDK) for C, impacting Sun Java System Directory Server versions 5.2 prior to Patch 4 and Sun ONE Directory Server 5.1. This flaw may allow remote attackers to exploit specific BER encodings, potentially leading to a denial of service by causing the server to crash. It poses a serious risk for systems leveraging these directory servers, necessitating prompt attention and remediation.

References

http://www.securitytracker.com/id?1017991
vdb-entryx_refsource_SECTRACK
http://secunia.com/advisories/25091
third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2007/1610
vdb-entryx_refsource_VUPEN

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.