Sun Java System Directory Server BER Decoding Flaw Lets Remote Users Deny Service
|
|
SecurityTracker Alert ID: 1017991 |
|
SecurityTracker URL: http://securitytracker.com/id/1017991
|
|
CVE Reference:
CVE-2007-2466
(Links to External Site)
|
Updated: May 13 2008
|
Original Entry Date: May 2 2007
|
Impact:
Denial of service via local system, Denial of service via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): 5.1, 5.2
|
Description:
A vulnerability was reported in Sun Java System Directory Server. A local or remote user can cause denial of service conditions.
A local or remote user can exploit a BER decoding flaw to cause the target service to crash. The flaw resides in the LDAP Software Development Kit for C.
|
Impact:
A remote user can cause the directory server to crash.
|
Solution:
Sun has issued the following fixes.
Native Packages versions:
Sun Java System Directory Server 5.2 Patch 5 (or later), as delivered in the following:
* Solaris SPARC: 116837-03, 115614-27, 115610-24
* Solaris X86: 116838-03, 115615-27, 115611-24
* Linux: 118353-03, 118080-12, 118079-11
PatchZIP (Compressed Archive) Versions:
Sun Java System Directory Server 5.2 Patch 5 (or later), as delivered in the following:
* Solaris SPARC: 117665-04
* Solaris x86: 117666-04
* Linux: 117668-04
* Windows: 117667-04
* HP-UX: 117669-04
* AIX: 117670-04
The Sun advisory is available at:
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102895-1
|
Vendor URL: sunsolve.sun.com/search/document.do?assetkey=1-26-102895-1 (Links to External Site)
|
Cause:
Not specified
|
Underlying OS:
Linux (Any), UNIX (AIX), UNIX (HP/UX), UNIX (Solaris - SunOS), Windows (Any)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Tue, 1 May 2007 21:50:11 -0400
Subject: Security Vulnerability in Sun Java System Directory Server May Cause Denial of Service (DoS)
|
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102895-1
|
|
