PT-2010-2459 · Sun · Sun Directory Server Enterprise Edition+1

Publicado 2010-02-25 · Atualizado 2017-08-17 · CVE-2010-0708

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Sun Directory Server Enterprise Edition versions 6.0 through 6.3.1 Sun Java System Directory Server version 5.2 Sun Directory Server Enterprise Edition version 7.0

Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, via a crafted LDAP search request. This can be achieved by exploiting unspecified vulnerabilities in the ns-slapd and slapd.exe components.

Recommendations For Sun Directory Server Enterprise Edition versions 6.0 through 6.3.1, consider restricting access to the LDAP search functionality until a fix is available. For Sun Java System Directory Server version 5.2, avoid using the vulnerable ns-slapd and slapd.exe components in production environments until a patch is released. For Sun Directory Server Enterprise Edition version 7.0, as a temporary workaround, consider disabling the LDAP search functionality to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2010-0708

Produtos afetados

Sun Directory Server Enterprise Edition

Sun Java System Directory Server

Referências · 5

• http://sunsolve.sun.com/search/document.do?assetkey=1-21-143884-01-1 · Correção
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-275711-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-0708 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56603 · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021788.1-1 · Aviso do Fabricante