CVE-2009-4442
First published: Mon Dec 28 2009(Updated: )
Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 does not properly implement the max-client-connections configuration setting, which allows remote attackers to cause a denial of service (connection slot exhaustion) by making multiple connections and performing no operations on these connections, aka Bug Id 6648665.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sun ONE Directory Server | =6.1-enterprise | |
| Sun ONE Directory Server | =6.3-enterprise | |
| Sun ONE Directory Server | =6.2-enterprise | |
| Sun ONE Directory Server | =6.3.1-enterprise | |
| Sun ONE Directory Server | =6.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2009-4442?
CVE-2009-4442 is rated as a moderate severity vulnerability due to its potential for causing denial of service.
How does CVE-2009-4442 affect Sun Java System Directory Server?
CVE-2009-4442 allows remote attackers to exhaust connection slots, leading to denial of service on affected versions of Sun Java System Directory Server.
What versions of Sun Java System Directory Server are affected by CVE-2009-4442?
CVE-2009-4442 affects Sun Java System Directory Server versions 6.0 through 6.3.1 inclusive.
How can I mitigate CVE-2009-4442?
To mitigate CVE-2009-4442, ensure proper configuration of the max-client-connections setting to limit the number of concurrent connections.
Is there a patch available for CVE-2009-4442?
There are no specific patches mentioned for CVE-2009-4442; it's recommended to consult product documentation for guidance on updates.
- agent/references
- agent/type
- agent/softwarecombine
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/author
- agent/event
- agent/description
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/sun
- canonical/sun one directory server
- version/sun one directory server/6.1-enterprise
- version/sun one directory server/6.3-enterprise
- version/sun one directory server/6.2-enterprise
- version/sun one directory server/6.3.1-enterprise
- version/sun one directory server/6.0