Secunia

A vulnerability has been reported in Sun Java System Directory Server, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an unspecified error within the handling of certain queries, which leads to a "free()" operation being performed on uninitialised memory. This can be exploited to crash the "ns-slapd" service by sending specially crafted queries.

The vulnerability is reported in the following products for Solaris 8, 9, and 10 on Solaris SPARC and Solaris x86 Platforms, Linux, Windows, HP-UX, and AIX:

-- Native Package Versions --

* Sun ONE Directory Server 5.2
* Sun Java System Directory Server 5 2003Q4 (5.2patch1)
* Sun Java System Directory Server 5 2004Q2 (5.2patch2)
* Sun Java System Directory Server 5 2005Q1 (5.2patch3)
* Sun Java System Directory Server 5 2005Q4 (5.2patch4)

-- PatchZIP (Compressed Archive) versions --

* Sun ONE Directory Server 5.1
* Sun One Directory Server 5.2
* Sun Java System Directory Server 5.2 Patch2
* Sun Java System Directory Server 5.2 Patch3
* Sun Java System Directory Server 5.2 Patch4

Solution
We are currently not aware of a solution.

Provided and/or discovered by
Discovered by an anonymous researcher and reported via iDefense.

Original Advisory
iDefense Labs:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=491

Sun:
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102853-1

Deep Links
Links available in Customer Area