VULNERABILITY INTELLIGENCE

CVE-2006-4175

CVSS score7.8 HIGH

EPSS probability3.54%

CISA KEVNot currently listed

Published2007-03-26

Last modified2026-06-16

Description

The LDAP server (ns-slapd) in Sun Java System Directory Server 5.2 Patch4 and earlier and ONE Directory Server 5.1 and 5.2 allows remote attackers to cause a denial of service (crash) via malformed queries, probably malformed BER queries, which trigger a free of uninitialized memory locations.