CVE-2009-0609

{"id": "CVE-2009-0609", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2009-02-17T17:30:06.017", "references": [{"url": "http://secunia.com/advisories/33923", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-21-125276-08-1", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-251086-1", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/33761", "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "Sun Java System Directory Proxy Server in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3, when a JDBC data source is used, does not properly handle (1) a long value in an ADD or (2) long string attributes, which allows remote attackers to cause a denial of service (JDBC backend outage) via crafted LDAP requests."}, {"lang": "es", "value": "Sun Java System Directory Proxy Server en Sun Java System Directory Server Enterprise Edition v6.0 hasta v6.3, cuando una fuente de datos JDBC es utilizado, no se maneja adecuadamente (1) un valor largo en un ADD o (2) atributos de cadena largos, lo que permite a atacantes remotos provocar una denegaci\u00f3n de servicio (JDBC backend outage) a trav\u00e9s de peticiones manipulada LDAP."}], "lastModified": "2009-02-18T05:00:00.000", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sun:java_system_directory_server:6.0:enterprise:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3F302F27-68F5-4B92-8579-8568B13D849C"}, {"criteria": "cpe:2.3:a:sun:java_system_directory_server:6.1:enterprise:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D3FDCE4B-38AC-4843-82B5-7EF85750ACFE"}, {"criteria": "cpe:2.3:a:sun:java_system_directory_server:6.2:enterprise:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C8490D6F-42B3-4602-84A5-BBDD4315F366"}, {"criteria": "cpe:2.3:a:sun:java_system_directory_server:6.3:enterprise:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1FE986BB-D278-4B34-9DC1-5D3102F94AF1"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}