CVE-2009-0609: Input Validation
Sun Java System Directory Proxy Server in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3, when a JDBC data source is used, does not properly handle (1) a long value in an ADD or (2) long string attributes, which allows remote attackers to cause a denial of service (JDBC backend outage) via crafted LDAP requests.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0609?
CVE-2009-0609 is rated as a high severity vulnerability due to its potential to cause denial of service.
How do I fix CVE-2009-0609?
To fix CVE-2009-0609, update your Sun Java System Directory Server to a version that addresses the vulnerability.
What are the affected versions for CVE-2009-0609?
CVE-2009-0609 affects Sun Java System Directory Server versions 6.0 to 6.3.
What type of attack does CVE-2009-0609 enable?
CVE-2009-0609 allows remote attackers to exploit the vulnerability to perform a denial of service attack.
Is CVE-2009-0609 related to JDBC data sources?
Yes, CVE-2009-0609 specifically involves improper handling of JDBC data sources within the affected software.