CVE-2009-4442: Medium severity sun one directory server vulnerability
Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 does not properly implement the max-client-connections configuration setting, which allows remote attackers to cause a denial of service (connection slot exhaustion) by making multiple connections and performing no operations on these connections, aka Bug Id 6648665.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2009-4442?
CVE-2009-4442 is rated as a moderate severity vulnerability due to its potential for causing denial of service.
How does CVE-2009-4442 affect Sun Java System Directory Server?
CVE-2009-4442 allows remote attackers to exhaust connection slots, leading to denial of service on affected versions of Sun Java System Directory Server.
What versions of Sun Java System Directory Server are affected by CVE-2009-4442?
CVE-2009-4442 affects Sun Java System Directory Server versions 6.0 through 6.3.1 inclusive.
How can I mitigate CVE-2009-4442?
To mitigate CVE-2009-4442, ensure proper configuration of the max-client-connections setting to limit the number of concurrent connections.
Is there a patch available for CVE-2009-4442?
There are no specific patches mentioned for CVE-2009-4442; it's recommended to consult product documentation for guidance on updates.