Vulnerability Name:

CVE-2006-4175 (CCN-33189)

Assigned:2006-08-16
Published:2007-03-23
Updated:2017-07-20
Summary:The LDAP server (ns-slapd) in Sun Java System Directory Server 5.2 Patch4 and earlier and ONE Directory Server 5.1 and 5.2 allows remote attackers to cause a denial of service (crash) via malformed queries, probably malformed BER queries, which trigger a free of uninitialized memory locations.
CVSS v3 Severity:7.5 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
CVSS v2 Severity:7.8 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C)
5.8 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
7.8 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C)
5.8 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
Vulnerability Type:CWE-Other
Vulnerability Consequences:Denial of Service
References:Source: MITRE
Type: CNA
CVE-2006-4175

Source: IDEFENSE
Type: Vendor Advisory
20070323 Sun Java System Directory Server 5.2 Uninitialized Pointer Cleanup Design Error Vulnerability

Source: CCN
Type: SA24634
Sun Java System Directory Server "ns-slapd" Denial of Service

Source: SECUNIA
Type: Vendor Advisory
24634

Source: CCN
Type: SECTRACK ID: 1017814
Sun Java System Directory Server Lets Remote Users Crash the ns-slapd Service

Source: CCN
Type: Sun Alert ID 102853
The Directory Server ("ns-slapd") May Exit Unexpectedly When Handling Certain Queries

Source: SUNALERT
Type: UNKNOWN
102853

Source: CCN
Type: ASA-2007-137
The Directory Server ("ns-slapd") May Exit Unexpectedly When Handling Certain Queries (Sun 102853)

Source: OSVDB
Type: UNKNOWN
33524

Source: CCN
Type: OSVDB ID: 33524
Sun Java System Directory Server ns-slapd Remote DoS

Source: BID
Type: UNKNOWN
23117

Source: CCN
Type: BID-23117
Sun Java System Directory Server Uninitialized Pointer Remote Memory Corruption Vulnerability

Source: SECTRACK
Type: UNKNOWN
1017814

Source: VUPEN
Type: UNKNOWN
ADV-2007-1090

Source: XF
Type: UNKNOWN
sun-java-cleanupcode-dos(33189)

Source: XF
Type: UNKNOWN
sun-java-cleanupcode-dos(33189)

Source: CCN
Type: iDefense Labs PUBLIC ADVISORY: 03.23.07
Sun Java System Directory Server 5.2 Uninitialized Pointer Cleanup Design Error Vulnerability

Vulnerable Configuration:Configuration 1:
  • cpe:/a:sun:java_system_directory_server:5.2:*:*:*:*:*:*:*
  • OR cpe:/a:sun:one_directory_server:5.1:*:*:*:*:*:*:*
  • OR cpe:/a:sun:one_directory_server:5.2:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:sun:java_system_directory_server:5.2:*:*:*:*:*:*:*
  • AND
  • cpe:/o:sun:solaris:8::x86:*:*:*:*:*
  • OR cpe:/o:sun:solaris:8::sparc:*:*:*:*:*
  • OR cpe:/o:sun:solaris:9::x86:*:*:*:*:*
  • OR cpe:/o:sun:solaris:10::sparc:*:*:*:*:*
  • OR cpe:/o:sun:solaris:10::x86:*:*:*:*:*
  • OR cpe:/o:sun:solaris:9::sparc:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    sun java system directory server 5.2
    sun one directory server 5.1
    sun one directory server 5.2
    sun java system directory server 5.2
    sun solaris 8
    sun solaris 8
    sun solaris 9
    sun solaris 10
    sun solaris 10
    sun solaris 9