Sun Java System Directory Server Directory Proxy Server JDBC Backend Denial Of Service Vulnerability

Bugtraq ID:	33761
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Feb 12 2009 12:00AM
Updated:	Feb 13 2009 03:38PM
Credit:	Sun
Vulnerable:	Sun Directory Server Enterprise Edition 6.3 Sun Directory Server Enterprise Edition 6.2 Sun Directory Server Enterprise Edition 6.1 Sun Directory Server Enterprise Edition 6.0
Not Vulnerable:

Sun Java System Directory Server Directory Proxy Server JDBC Backend Denial Of Service Vulnerability

Sun Java System Directory Server is prone to a denial-of-service vulnerability that affects the Directory Proxy Server.

An attacker can exploit this issue to make the Directory Proxy Server unresponsive to certain requests implying a JDBC backend. This will result in denial-of-service conditions.

The issue affects Sun Java System Directory Server Enterprise Edition 6.0, 6.1, 6.2, and 6.3.

Sun Java System Directory Server Directory Proxy Server JDBC Backend Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sun Java System Directory Server Directory Proxy Server JDBC Backend Denial Of Service Vulnerability

Solution:
The vendor has released fixes. Please see the references for more information.

Sun Java System Directory Server Directory Proxy Server JDBC Backend Denial Of Service Vulnerability

References:

• Sun Java System Directory Server Homepage (Sun)
  
• Solution 251086: A Security Vulnerability in the Sun Java System Server, Related (Sun)