Unscored severity · published Feb 25, 2010
CVE-2010-0708
Multiple unspecified vulnerabilities in (1) ns-slapd and (2) slapd.exe in Sun Directory Server Enterprise Edition 7.0, Sun Java System Directory Server 5.2, and Sun Java System…
–
CVSS
2.2%
EPSS
No
On KEV
Description
Multiple unspecified vulnerabilities in (1) ns-slapd and (2) slapd.exe in Sun Directory Server Enterprise Edition 7.0, Sun Java System Directory Server 5.2, and Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 allow remote attackers to cause a denial of service (daemon crash) via a crafted LDAP search request.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JS
Java System Directory Server · Sun
5.2; 6.0; 6.1; 6.2; 6.3; 6.3.1; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-0708
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-0708
Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-21-143884-01-1
Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-26-275711-1
sunsolve.sun.com
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021788.1-1
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/56603
More from Java System Directory Server
–
CVE-2010-0313
The core_get_proxyauth_dn function in ns-slapd in Sun Java System Directory Server Enterprise Edition 7.0 allows remote attackers to cause a denial of service (NULL pointer…
–
CVE-2009-4443
Unspecified vulnerability in the psearch (aka persistent search) functionality in Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through…
–
CVE-2009-4442
Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 does not properly implement the max-client-connections configuration setting,…
–
CVE-2009-4441
Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 does not enable the SO_KEEPALIVE socket option, which makes it easier for…
–
CVE-2009-4440
Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 does not properly handle multiple client connections within a short time…