CVE-2009-0609

CWE-20 — Improper Input Validation3 documents3 sources
Severity
7.8HIGH
EPSS
0.7%
top 26.98%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
SUN Java System Directory Server
Timeline
PublishedFeb 17
Latest updateMay 2

Description

Sun Java System Directory Proxy Server in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3, when a JDBC data source is used, does not properly handle (1) a long value in an ADD or (2) long string attributes, which allows remote attackers to cause a denial of service (JDBC backend outage) via crafted LDAP requests.

CVSS vector

AV:N/AC:L/C:N/I:N/A:CExploitability: 10.0 | Impact: 6.9

Affected Packages1 packages

Patches

Patch: sunsolve.sun.com ↗Patch: sunsolve.sun.com ↗Patch: sunsolve.sun.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-2m33-x3vv-rx8x: Sun Java System Directory Proxy Server in Sun Java System Directory Server Enterprise Edition 6↗2022-05-02
▶
CVEList
CVE-2009-0609: Sun Java System Directory Proxy Server in Sun Java System Directory Server Enterprise Edition 6↗2009-02-17
▶