|
|
|
|
Sun Java System Directory Server LDAP Request Buffer Overflow
|
|
Secunia Advisory:
|
SA14960
|
|
|
Release Date:
|
2005-04-14
|
|
Popularity:
|
7,703 views
|
|
|
Critical:
|
Moderately critical
|
|
Impact:
|
DoS
System access
|
|
Where:
|
From local network
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | Sun Java System Directory Server 5.x
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
Description:
Sun has acknowledged a vulnerability in Sun ONE/Java System Directory Server, which can be exploited by malicious people to cause a DoS (Denial of Service) or compromise a vulnerable system.
The vulnerability is caused due to a boundary error in the access control implementation when handling LDAP requests. This can be exploited to cause a buffer overflow via a specially crafted, invalid LDAP request.
Successful exploitation crashes the LDAP service or allows execution of arbitrary code with the privileges of the LDAP process.
Solution:
Apply patches.
-- Sun ONE Directory Server 5.1 --
Apply SP4 or later.
http://www.sun.com/download/products.xml?id=42155636
-- Sun Java System Directory Server 5.2 --
Solaris 8, 9, and 10 on the SPARC Platform:
http://sunsolve.sun.com/search/docume...setkey=urn:cds:docid:1-21-115614-20-1
Solaris 8, 9, and 10 on the x86 Platform:
http://sunsolve.sun.com/search/docume...setkey=urn:cds:docid:1-21-115615-20-1
Linux:
http://sunsolve.sun.com/search/docume...setkey=urn:cds:docid:1-21-118080-05-1
-- PatchZIP version of Sun Java System Directory Server 5.2 --
Solaris 8, 9, and 10 on the SPARC Platform:
http://sunsolve.sun.com/search/docume...setkey=urn:cds:docid:1-21-117665-02-1
Solaris 8, 9, and 10 on the x86 Platform:
http://sunsolve.sun.com/search/docume...setkey=urn:cds:docid:1-21-117666-02-1
Linux:
http://sunsolve.sun.com/search/docume...setkey=urn:cds:docid:1-21-117668-02-1
Windows:
http://sunsolve.sun.com/search/docume...setkey=urn:cds:docid:1-21-117667-02-1
HP-UX:
http://sunsolve.sun.com/search/docume...setkey=urn:cds:docid:1-21-117669-02-1
AIX:
http://sunsolve.sun.com/search/docume...setkey=urn:cds:docid:1-21-117670-02-1
Original Advisory:
http://sunsolve.sun.com/search/document.do?assetkey=1-26-57754-1
Other References:
US-CERT VU#258905:
http://www.kb.cert.org/vuls/id/258905
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
|
|
Today
|
New advisories:
|
19 |
|
New vulnerabilities:
|
68 |
|
Updated advisories:
|
62 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
 Solutions | More...
|
|
|
|
Send Feedback to Secunia
|
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
|
|
|
|
|
|
|
