Unrated severityNVD Advisory· Published Feb 17, 2009· Updated Jun 16, 2026

CVE-2009-0609

Description

Sun Java System Directory Proxy Server in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3, when a JDBC data source is used, does not properly handle (1) a long value in an ADD or (2) long string attributes, which allows remote attackers to cause a denial of service (JDBC backend outage) via crafted LDAP requests.

Affected products

Sun Corporation/Java System Directory Server4 versions
cpe:2.3:a:sun:java_system_directory_server:6.0:enterprise:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:sun:java_system_directory_server:6.0:enterprise:*:*:*:*:*:*
- cpe:2.3:a:sun:java_system_directory_server:6.1:enterprise:*:*:*:*:*:*
- cpe:2.3:a:sun:java_system_directory_server:6.2:enterprise:*:*:*:*:*:*
- cpe:2.3:a:sun:java_system_directory_server:6.3:enterprise:*:*:*:*:*:*
Sun Corporation/Java System Directory Server Enterprise Editionllm-create
Range: 6.0 - 6.3
Sun Corporation/Java System Directory Proxy Serverllm-create
Range: 6.0 - 6.3

Patches

Vulnerability mechanics

References

sunsolve.sun.com/search/document.donvdPatchVendor Advisory
sunsolve.sun.com/search/document.donvdPatchVendor Advisory
secunia.com/advisories/33923nvdVendor Advisory
www.securityfocus.com/bid/33761nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000