CVE-2006-0647: Sun Java System Directory Server

Medium severity, CVSS 5.0. EPSS: 9.9% chance of exploitation in the next 30 days.

LDAP service in Sun Java System Directory Server 5.2, running on Linux and possibly other platforms, allows remote attackers to cause a denial of service (memory allocation error) via an LDAP packet with a crafted subtree search request, as demonstrated using the ProtoVer LDAP test suite.

Affected products

• Sun Java System Directory Server: version 5.2 only

Published 2006-02-13. Last modified 2026-06-16.