Total vulnerabilities in the database
The LDAP server (ns-slapd) in Sun Java System Directory Server 5.2 Patch4 and earlier and ONE Directory Server 5.1 and 5.2 allows remote attackers to cause a denial of service (crash) via malformed queries, probably malformed BER queries, which trigger a free of uninitialized memory locations.
| Software | From | Fixed in |
|---|---|---|
| sun / java_system_directory_server | 5.2 | 5.2.x |
| sun / one_directory_server | 5.1 | 5.1.x |
| sun / one_directory_server | 5.2 | 5.2.x |