漏洞信息详情

Sun Java System Directory Server BER Decoding 拒绝服务漏洞

• CNNVD编号：CNNVD-200705-057
• 危害等级： 中危
  
• CVE编号： CVE-2007-2466
• 漏洞类型： 其他
• 发布时间： 2007-05-02
• 威胁类型： 远程
• 更新时间： 2007-05-03
• 厂        商： sun
• 漏洞来源： The vendor disclos...

漏洞简介

当在Sun ONE Directory Server 5.1上的Sun Java System Directory Server 5.2到Patch 4中被使用时，LDAP Software Development Kit (SDK) for C中存在未明漏洞。远程攻击者可以借助特定的BER编码，引起拒绝服务攻击(崩溃)。

漏洞公告

目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接：

http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-117670-04-1

http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-117667-04-1

http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-117668-04-1

http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-117669-04-1

http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-117670-04-1

http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-117667-04-1

http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-117668-04-1

http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-117669-04-1

http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-117670-04-1

http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-117667-04-1

http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-117668-04-1

http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-117669-04-1

http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-117670-04-1

http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-115610-24-1

http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-115611-24-1

http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-115614-27-1

http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-115615-27-1

http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-116837-03-1

http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-116838-03-1

http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-118080-12-1

http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-118353-03-1

参考网址

来源: SECTRACK

名称: 1017991

链接:http://www.securitytracker.com/id?1017991

来源: BID

名称: 23743

链接:http://www.securityfocus.com/bid/23743

来源: VUPEN

名称: ADV-2007-1610

链接:http://www.frsirt.com/english/advisories/2007/1610

来源: XF

名称: sun-java-ber-dos(34002)

链接:http://xforce.iss.net/xforce/xfdb/34002

来源: SUNALERT

名称: 102895

链接:http://sunsolve.sun.com/search/document.do?assetkey=1-26-102895-1

来源: SECUNIA

名称: 25091

链接:http://secunia.com/advisories/25091

来源: OSVDB

名称: 35743

链接:http://osvdb.org/35743

受影响实体

• Sun One_directory_server:5.1  
• Sun Java_system_directory_server:5.2:2005q4  
• Sun Java_system_directory_server:5.2:2005q1  
• Sun Java_system_directory_server:5.2:2004q2  
• Sun Java_system_directory_server:5.2:2003q4  

补丁

暂无