First published: Mon Dec 28 2009(Updated: )
Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 does not enable the SO_KEEPALIVE socket option, which makes it easier for remote attackers to cause a denial of service (connection slot exhaustion) via multiple connections, aka Bug Id 6782659.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Sun ONE Directory Server | =6.0 | |
Sun ONE Directory Server | =6.1-enterprise | |
Sun ONE Directory Server | =6.2-enterprise | |
Sun ONE Directory Server | =6.3-enterprise | |
Sun ONE Directory Server | =6.3.1-enterprise |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2009-4441 is categorized with a medium severity due to its potential for remote denial-of-service attacks.
To fix CVE-2009-4441, ensure that the SO_KEEPALIVE socket option is enabled in the server configuration.
CVE-2009-4441 affects Sun Java System Directory Server versions 6.0 through 6.3.1.
The impact of CVE-2009-4441 is a denial of service through connection slot exhaustion due to multiple unmaintained connections.
Organizations using vulnerable versions of the Sun Java System Directory Server are at risk from CVE-2009-4441.