Vulnerability CVE-2010-0708
Published: 2010-02-25   Modified: 2012-02-13

Description:
Multiple unspecified vulnerabilities in (1) ns-slapd and (2) slapd.exe in Sun Directory Server Enterprise Edition 7.0, Sun Java System Directory Server 5.2, and Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 allow remote attackers to cause a denial of service (daemon crash) via a crafted LDAP search request.

Type:

CWE-noinfo

CVSS2 => (AV:N/AC:L/Au:N/C:N/I:N/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5/10
2.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
None
None
Partial
Affected software
SUN -> Java system directory server 

 References:
http://sunsolve.sun.com/search/document.do?assetkey=1-26-275711-1
http://sunsolve.sun.com/search/document.do?assetkey=1-21-143884-01-1
http://xforce.iss.net/xforce/xfdb/56603
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021788.1-1
Copyright 2024, cxsecurity.com

 

Back to Top