Sun Java System Directory Server LDAP Request Denial Of Service Vulnerability

Bugtraq ID:	33732
Class:	Unknown
CVE:	CVE-2009-0576
Remote:	Yes
Local:	No
Published:	Feb 10 2009 12:00AM
Updated:	Apr 13 2015 09:11PM
Credit:	Sun
Vulnerable:	Sun Java System Directory Server 5.2 Patch6 Sun Java System Directory Server 5.2 Patch4 Sun Java System Directory Server 5.2 Patch3 Sun Java System Directory Server 5.2 Patch2 Sun Java System Directory Server 5.2 Blue Coat Systems Policy Center 8.7 Blue Coat Systems Policy Center 8.6 Blue Coat Systems Policy Center 0
Not Vulnerable:	Blue Coat Systems Policy Center 8.7.2

Sun Java System Directory Server LDAP Request Denial Of Service Vulnerability

Sun Java System Directory Server is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to crash the server, denying access to legitimate users.

The issue affects the following versions:

Sun Java System Directory Server 5.2
Sun Java System Directory Server 5.2 Patch2
Sun Java System Directory Server 5.2 Patch3
Sun Java System Directory Server 5.2 Patch4
Sun Java System Directory Server 5.2 Patch6

Sun Java System Directory Server LDAP Request Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sun Java System Directory Server LDAP Request Denial Of Service Vulnerability

Solution:
The vendor has released fixes. Please see the references for more information.

Sun Java System Directory Server LDAP Request Denial Of Service Vulnerability

References:

• Sun Java System Directory Server Homepage (Sun)
  
• January 10, 2012 - Multiple Sun ONE Directory Server vulnerabilities in PolicyCe (Blue Coat Systems)
  
• Solution 250086 - A Security Vulnerability in Sun Java System Directory Server M (Sun)