Unspecified vulnerability in the LDAP Software Development Kit (SDK) for C, as used in Sun Java System Directory Server 5.2 up to Patch 4 and Sun ONE Directory Server 5.1, allows remote attackers to cause a denial of service (crash) via certain BER encodings.

The remote host is running the Sun Java System Directory Server, an LDAP server from Sun Microsystems. 

The remote version of this service is affected by multiple vulnerabilities.  Versions 6.0 and prior to 5.2 Patch 5 are affected by :

  - list attributes information disclosure
  - Unauthorized Access (restricted to super users). 

Versions prior to 5.2 Patch 5 are affected by :

  - Denial of service due to the BER decoding handler
  - Memory corruption in the failed request handler.

Detections

Analytics

CVE-2007-2466

high

Tenable Plugins

high