First published: Tue Feb 17 2009(Updated: )
Sun Java System Directory Proxy Server in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3, when a JDBC data source is used, does not properly handle (1) a long value in an ADD or (2) long string attributes, which allows remote attackers to cause a denial of service (JDBC backend outage) via crafted LDAP requests.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Sun Java System Directory Server | =6.1-enterprise | |
Sun Java System Directory Server | =6.3-enterprise | |
Sun Java System Directory Server | =6.2-enterprise | |
Sun Java System Directory Server | =6.0-enterprise |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2009-0609 is rated as a high severity vulnerability due to its potential to cause denial of service.
To fix CVE-2009-0609, update your Sun Java System Directory Server to a version that addresses the vulnerability.
CVE-2009-0609 affects Sun Java System Directory Server versions 6.0 to 6.3.
CVE-2009-0609 allows remote attackers to exploit the vulnerability to perform a denial of service attack.
Yes, CVE-2009-0609 specifically involves improper handling of JDBC data sources within the affected software.