exploitDog

CVE-2009-4443

Опубликовано: 28 дек. 2009

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Unspecified vulnerability in the psearch (aka persistent search) functionality in Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 allows remote attackers to cause a denial of service (psearch outage) by using a crafted psearch client to send requests that trigger a psearch thread loop, aka Bug Id 6855978.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sun:java_system_directory_server:6.0:*:enterprise:*:*:*:*:*

cpe:2.3:a:sun:java_system_directory_server:6.1:enterprise:*:*:*:*:*:*

cpe:2.3:a:sun:java_system_directory_server:6.2:enterprise:*:*:*:*:*:*

cpe:2.3:a:sun:java_system_directory_server:6.3:enterprise:*:*:*:*:*:*

cpe:2.3:a:sun:java_system_directory_server:6.3.1:enterprise:*:*:*:*:*:*

EPSS

Процентиль: 81%

0.01483

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-c8fp-pw4c-fccq

github

почти 4 года назад

Unspecified vulnerability in the psearch (aka persistent search) functionality in Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 allows remote attackers to cause a denial of service (psearch outage) by using a crafted psearch client to send requests that trigger a psearch thread loop, aka Bug Id 6855978.

EPSS

Процентиль: 81%

0.01483

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-noinfo