Skip to main content

Access of Uninitialized Pointer

CVE-2006-4175

High
7.8/10

Summary

The LDAP server (ns-slapd) in Sun Java System Directory Server 5.2 Patch4 and earlier and ONE Directory Server 5.1 and 5.2 allows remote attackers to cause a denial of service (crash) via malformed queries, probably malformed BER queries, which trigger a free of uninitialized memory locations.

  • LOW
  • NETWORK
  • NONE
  • NONE
  • NONE
  • COMPLETE

CWE-824 - Access of Uninitialized Pointer

The program accesses or uses a pointer that has not been initialized.

References

Advisory Timeline

  • Published