Unscored severity · published Jun 21, 2006
CVE-2006-3127
Memory leak in Network Security Services (NSS) 3.11, as used in Sun Java Enterprise System 2003Q4 through 2005Q1 and Java System Directory Server 5.2, allows remote attackers to…
–
CVSS
3.2%
EPSS
No
On KEV
Description
Memory leak in Network Security Services (NSS) 3.11, as used in Sun Java Enterprise System 2003Q4 through 2005Q1 and Java System Directory Server 5.2, allows remote attackers to cause a denial of service (memory consumption) by performing a large number of RSA cryptographic operations.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.2% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JE
Java Enterprise System · Sun
2003q4; 2004q2; 2005q1 · source: NVD
JS
Java System Directory Server · Sun
5.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-3127
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-3127
Vendor Advisory
http://secunia.com/advisories/25048
securitytracker.com
http://securitytracker.com/id?1016294
Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102461-1
sunsolve.sun.com
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102896-1
www.redhat.com
http://www.redhat.com/archives/fedora-package-announce/2006-June/msg00155.html
www.securityfocus.com
http://www.securityfocus.com/bid/18604
More from Java Enterprise System
–
CVE-2007-2435
Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier, allows remote attackers to perform unauthorized actions via an…
–
CVE-2004-0826
Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2…