CVE-2009-4442

Published: Dec 28, 2009Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 does not properly implement the max-client-connections configuration setting, which allows remote attackers to cause a denial of service (connection slot exhaustion) by making multiple connections and performing no operations on these connections, aka Bug Id 6648665.

Affected (5)

Products: Sun: Java System Directory Server

Sun

1 product

Java System Directory Server

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Sun Java System Directory Server	Version 6.0
Sun Java System Directory Server	Version 6.1 enterprise
Sun Java System Directory Server	Version 6.2 enterprise
Sun Java System Directory Server	Version 6.3.1 enterprise
Sun Java System Directory Server	Version 6.3 enterprise