CVE-2006-4175

Name of the Vulnerable Software and Affected Versions: Sun Java System Directory Server versions 5.2 Patch4 and earlier ONE Directory Server versions 5.1 and 5.2

Description: The issue allows remote attackers to cause a denial of service, resulting in a crash, by sending malformed queries to the LDAP server. The queries are likely malformed BER queries, which trigger the freeing of uninitialized memory locations.

Recommendations: For Sun Java System Directory Server versions 5.2 Patch4 and earlier, update to a version later than Patch4 to resolve the issue. For ONE Directory Server versions 5.1 and 5.2, consider restricting access to the LDAP server until a patch is available.