Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2009-4440

Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 does not properly handle multiple client connections within a short time window, which allows remote attackers to hijack the backend connection of an authenticated user, and obtain the privileges of this user, by making a client connection in opportunistic circumstances, related to "long binds," aka Bug Ids 6828462 and 6823593.

  • Published: Dec 28, 2009
  • Updated: Apr 13, 2023
  • CVE: CVE-2009-4440
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
sun / java_system_directory_server 6.1-enterprise 6.1-enterprise.x
sun / java_system_directory_server 6.3-enterprise 6.3-enterprise.x
sun / java_system_directory_server 6.2-enterprise 6.2-enterprise.x
sun / java_system_directory_server 6.0 6.0.x