A vulnerability has been identified in Sun Java System Directory Server, which could be exploited by attackers to cause a denial of service. This issue is caused by an unspecified error when processing malformed LDAP requests, which could be exploited by remote or local attackers to crash an affected server, creating a denial of service condition.

Affected Products

Sun Java System Directory Server 5.2
Sun Java System Directory Server 5.2 Patch2
Sun Java System Directory Server 5.2 Patch3
Sun Java System Directory Server 5.2 Patch4
Sun Java System Directory Server 5.2 Patch6

Solution

Apply patches :
http://sunsolve.sun.com/search/document.do?assetkey=1-66-250086-1

References

http://www.vupen.com/english/advisories/2009/0409
http://sunsolve.sun.com/search/document.do?assetkey=1-66-250086-1

Credits

Vulnerability reported by the vendor.

Changelog

2009-02-11 : Initial release

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.