CVE-2009-4440

Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 does not properly handle multiple client connections…

published December 28, 2009

CVSS
—
EPSS
2%
Percentile
75.7
In the wild
Unconfirmed
What it is

Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 does not properly handle multiple client connections within a short time window, which allows remote attackers to hijack the backend connection of an authenticated user, and obtain the privileges of this user, by making a client connection in opportunistic circumstances, related to "long binds," aka Bug Ids 6828462 and 6823593.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01604 · 75.7th percentile
Published
2009-12-28T19:00Z
EPSS history
Timeline
  • 28 DEC 19:00Z
    Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 does not properly handle multiple client connections…
    cvelistv5