Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2009-0609

Sun Java System Directory Proxy Server in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3, when a JDBC data source is used, does not properly handle (1) a long value in an ADD or (2) long string attributes, which allows remote attackers to cause a denial of service (JDBC backend outage) via crafted LDAP requests.

  • Published: Feb 17, 2009
  • Updated: Apr 13, 2023
  • CVE: CVE-2009-0609
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.8
  • AV:N/AC:L/Au:N/C:N/I:N/A:C

CWEs:

Software From Fixed in
sun / java_system_directory_server 6.1-enterprise 6.1-enterprise.x
sun / java_system_directory_server 6.3-enterprise 6.3-enterprise.x
sun / java_system_directory_server 6.2-enterprise 6.2-enterprise.x
sun / java_system_directory_server 6.0-enterprise 6.0-enterprise.x