CVE-2009-4443: Medium severity sun one directory server vulnerability
Unspecified vulnerability in the psearch (aka persistent search) functionality in Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 allows remote attackers to cause a denial of service (psearch outage) by using a crafted psearch client to send requests that trigger a psearch thread loop, aka Bug Id 6855978.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2009-4443?
CVE-2009-4443 has been assessed to allow for remote denial of service attacks on affected systems.
How do I fix CVE-2009-4443?
To mitigate CVE-2009-4443, you should upgrade to a patched version of Sun Java System Directory Server Enterprise Edition, specifically version 6.4 or a later release.
What versions of Sun Java System Directory Server are affected by CVE-2009-4443?
The affected versions include Sun Java System Directory Server Enterprise Edition 6.0, 6.1, 6.2, 6.3, and 6.3.1.
Can CVE-2009-4443 be exploited remotely?
Yes, CVE-2009-4443 can be exploited remotely using crafted psearch client requests.
What is the impact of CVE-2009-4443 on services?
The impact of CVE-2009-4443 is a denial of service, resulting in outages for the persistent search functionality in the Directory Proxy Server.