Unscored severity · published Dec 28, 2009
CVE-2009-4443
Unspecified vulnerability in the psearch (aka persistent search) functionality in Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through…
–
CVSS
2.1%
EPSS
No
On KEV
Description
Unspecified vulnerability in the psearch (aka persistent search) functionality in Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 allows remote attackers to cause a denial of service (psearch outage) by using a crafted psearch client to send requests that trigger a psearch thread loop, aka Bug Id 6855978.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JS
Java System Directory Server · Sun
6.0; 6.1; 6.2; 6.3; 6.3.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-4443
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-4443
secunia.com
http://secunia.com/advisories/37915
Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-21-141958-01-1
Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-66-270789-1
www.securityfocus.com
http://www.securityfocus.com/bid/37481
www.securitytracker.com
http://www.securitytracker.com/id?1023389
www.vupen.com
http://www.vupen.com/english/advisories/2009/3647
More from Java System Directory Server
–
CVE-2010-0708
Multiple unspecified vulnerabilities in (1) ns-slapd and (2) slapd.exe in Sun Directory Server Enterprise Edition 7.0, Sun Java System Directory Server 5.2, and Sun Java System…
–
CVE-2010-0313
The core_get_proxyauth_dn function in ns-slapd in Sun Java System Directory Server Enterprise Edition 7.0 allows remote attackers to cause a denial of service (NULL pointer…
–
CVE-2009-4442
Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 does not properly implement the max-client-connections configuration setting,…
–
CVE-2009-4441
Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 does not enable the SO_KEEPALIVE socket option, which makes it easier for…
–
CVE-2009-4440
Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 does not properly handle multiple client connections within a short time…