CVE-2006-3127: Sun Java Enterprise System

High severity, CVSS 7.8. EPSS: 3.2% chance of exploitation in the next 30 days.

Memory leak in Network Security Services (NSS) 3.11, as used in Sun Java Enterprise System 2003Q4 through 2005Q1 and Java System Directory Server 5.2, allows remote attackers to cause a denial of service (memory consumption) by performing a large number of RSA cryptographic operations.

Affected products

• Sun Java Enterprise System: version 2003q4 only; version 2004q2 only; version 2005q1 only
• Sun Java System Directory Server: version 5.2 only

Published 2006-06-21. Last modified 2026-06-16.