Vulnerability reported in Sun Java System Directory Server

Filed in archive Security on May 1, 2007

Vulnerability has been reported in Sun Java System Directory Server which can be exploited by hackers for carrying out DoS attack. Caused due to memory leak within the Network Security Services it can be exploited for causing DoS as a result of memory exhaustion by sending a number of specially crafted requests to a vulnerable system. It might cause the Sun Java System Directory Server 5.2 to either hang or become unresponsive.

The following versions shave been affected as a result:

Sun Java System Directory Server 5.2
Sun Java System Directory Server 5.2 Patch2
Sun Java System Directory Server 5.2 Patch3
Sun Java System Directory Server 5.2

The Directory Server becomes unresponsive in case of this vulnerability and a final solution in this regard is still pending. The vendor recommends that in case of unresponsive LDAP server instance the following commands should be used for restarting the LDAP server process:

In case of Windows system the services panel should be opened and the service should be started manually whereas in case of UNIX systems # <server instance="" path="">/start-slapd command should be used.
</server>