LDAP: Sun Directory Server Denial of Service

This signature detects attempts to exploit a known vulnerability in the Sun Directory Server. The vulnerability is caused due to improper handling of certain overly large LDAP messages. An unauthenticated remote attacker can send a maliciously crafted LDAP message to the target host, which can terminate the affected LDAP server on the target system.

Extended Description

Sun ONE Directory Server is prone to a remote denial-of-service vulnerability. This issue is due to the application's failure to handle malformed network traffic. This issue allows remote attackers to crash the application, denying service to legitimate users.

Affected Products

Sun java_system_directory_server

Short Name
LDAP:SUN-DIR-OF
Severity
Minor
Recommended
False
Recommended Action
Drop
Category
LDAP
Keywords
CVE-2006-0647 Denial Directory Server Service Sun bid:16550 of
Release Date
02/24/2006
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3727
Port
TCP/9833
False Positive
Unknown
Vendors

Sun

CVSS Score

5.0

Found a potential security threat?