Sun ONE Directory Server Unprivileged LDAP Operation Denial Of Service Vulnerabliity

Bugtraq ID:	7478
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	May 01 2003 12:00AM
Updated:	May 01 2003 12:00AM
Credit:	This vulnerability was reported by Sun Microsystems.
Vulnerable:	Sun ONE Directory Server 5.1 SP1 Sun ONE Directory Server 5.1 - HP HP-UX 11.0 - HP HP-UX 11i v1 - IBM AIX 4.3.3 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Datacenter Server SP2 - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Terminal Services SP2 - Microsoft Windows NT Enterprise Server 4.0 SP6a - Microsoft Windows NT Server 4.0 SP6a - Redhat Linux 7.2 - Sun Linux 5.0.3 - Sun Linux 5.0 + Sun Solaris 9_x86 + Sun Solaris 9 - Sun Solaris 8_x86 - Sun Solaris 8_sparc Sun ONE Directory Server 5.0 SP2 Sun ONE Directory Server 5.0 SP1 Sun ONE Directory Server 5.0 - HP HP-UX 11.0 - HP HP-UX 11i v1 - IBM AIX 4.3.3 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Datacenter Server SP2 - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Terminal Services SP2 - Microsoft Windows NT Enterprise Server 4.0 SP6a - Microsoft Windows NT Server 4.0 SP6a - Redhat Linux 7.2 - Sun Linux 5.0.3 - Sun Linux 5.0 - Sun Solaris 9_x86 - Sun Solaris 9 - Sun Solaris 8_x86 - Sun Solaris 8_sparc Sun ONE Directory Server 4.16 SP1 Sun ONE Directory Server 4.16 - HP HP-UX 11.0 - HP HP-UX 11i v1 - IBM AIX 4.3.3 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Datacenter Server SP2 - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Terminal Services SP2 - Microsoft Windows NT Enterprise Server 4.0 SP6a - Microsoft Windows NT Server 4.0 SP6a - Redhat Linux 7.2 - Sun Linux 5.0.3 - Sun Linux 5.0 - Sun Solaris 9_x86 - Sun Solaris 9 - Sun Solaris 8_x86 - Sun Solaris 8_sparc
Not Vulnerable:	Sun ONE Directory Server 5.1 SP2

Sun ONE Directory Server Unprivileged LDAP Operation Denial Of Service Vulnerabliity

A denial of service vulnerability has been reported for Sun ONE Directory Server. The vulnerability has been reported to occur when certain LDAP operations are made which will result in the server process to crash.

Precise technical details of this vulnerability are currently unknown. This BID will be updated as further information becomes available.

Sun ONE Directory Server Unprivileged LDAP Operation Denial Of Service Vulnerabliity

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sun ONE Directory Server Unprivileged LDAP Operation Denial Of Service Vulnerabliity

Solution:
The following patches are available:


Sun ONE Directory Server 5.1

• Sun 113859-01
  For Sun ONE Directory Server bundled with Solaris 9 for SPARC systems.
  http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=113859&rev=01


• Sun 114273-01
  For Sun ONE Directory Server bundled with Solaris 9 for x86 systems.
  http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=114273&rev=01

Sun ONE Directory Server Unprivileged LDAP Operation Denial Of Service Vulnerabliity

References:

• Sun Alert ID: 52102 (Sun)