ID CVE-2007-2466
Summary Unspecified vulnerability in the LDAP Software Development Kit (SDK) for C, as used in Sun Java System Directory Server 5.2 up to Patch 4 and Sun ONE Directory Server 5.1, allows remote attackers to cause a denial of service (crash) via certain BER encodings.
References
Vulnerable Configurations
  • cpe:2.3:a:sun:java_system_directory_server:5.2:*:*:*:*:*:*:*
    cpe:2.3:a:sun:java_system_directory_server:5.2:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:java_system_directory_server:5.2:2003q4:*:*:*:*:*:*
    cpe:2.3:a:sun:java_system_directory_server:5.2:2003q4:*:*:*:*:*:*
  • cpe:2.3:a:sun:java_system_directory_server:5.2:2004q2:*:*:*:*:*:*
    cpe:2.3:a:sun:java_system_directory_server:5.2:2004q2:*:*:*:*:*:*
  • cpe:2.3:a:sun:java_system_directory_server:5.2:2005q1:*:*:*:*:*:*
    cpe:2.3:a:sun:java_system_directory_server:5.2:2005q1:*:*:*:*:*:*
  • cpe:2.3:a:sun:java_system_directory_server:5.2:2005q4:*:*:*:*:*:*
    cpe:2.3:a:sun:java_system_directory_server:5.2:2005q4:*:*:*:*:*:*
  • cpe:2.3:a:sun:one_directory_server:5.1:*:*:*:*:*:*:*
    cpe:2.3:a:sun:one_directory_server:5.1:*:*:*:*:*:*:*
CVSS
Base: 7.8 (as of 29-07-2017 - 01:31)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:C
refmap via4
bid 23743
osvdb 35743
sectrack 1017991
secunia 25091
sunalert 102895
vupen ADV-2007-1610
xf sun-java-ber-dos(34002)
Last major update 29-07-2017 - 01:31
Published 02-05-2007 - 22:19
Last modified 29-07-2017 - 01:31
Back to Top