CVE-2006-4175

HIGH 7.8CVE-2006-4175 · Published 26/03/2007 · updated 16/06/2026

In short

CVE-2006-4175 is a HIGH (CVSS 7.8) vulnerability affecting java system directory server (sun), one directory server (sun).
Chance of exploitation in the next 30 days (EPSS): 3.5%, higher than 89.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
java system directory server sun	`= 5.2`	No fix yet
one directory server sun	`= 5.1= 5.2`	No fix yet

Description

The LDAP server (ns-slapd) in Sun Java System Directory Server 5.2 Patch4 and earlier and ONE Directory Server 5.1 and 5.2 allows remote attackers to cause a denial of service (crash) via malformed queries, probably malformed BER queries, which trigger a free of uninitialized memory locations.

References

labs.idefense.com/intelligence/vulnerabilities/display.php · Broken Link
secunia.com/advisories/24634 · Broken Link
sunsolve.sun.com/search/document.do · Broken Link
osvdb.org/33524 · Broken Link
securityfocus.com/bid/23117 · Broken Link
securitytracker.com/id · Broken Link
vupen.com/english/advisories/2007/1090 · Broken Link
exchange.xforce.ibmcloud.com/vulnerabilities/33189 · Third Party Advisory

More vulnerabilities in java system directory server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

java system directory server

sun

= 5.2

No fix yet

one directory server

sun

= 5.1= 5.2

No fix yet

More vulnerabilities in java system directory server

See all →