A vulnerability has been identified in Sun Directory Server Enterprise Edition, which could be exploited by remote attackers to cause a denial of service. This issue is caused by a NULL pointer dereference error in the "ns-slapd" daemon when processing malformed LDAP search request messages, which could be exploited to crash a vulnerable daemon, creating a denial of service condition.

Affected Products

Sun Directory Server Enterprise Edition version 7.0

Solution

VUPEN Security is not aware of any vendor-supplied patch.

References

http://www.vupen.com/english/advisories/2010/0085
http://intevydis.blogspot.com/2010/01/sun-directory-server-70.html

Credits

Vulnerability reported by Evgeny Legerov.

Changelog

2010-01-11 : Initial release

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.