CVE-2006-4175: Sun Java System Directory Server

High severity, CVSS 7.8. EPSS: 3.4% chance of exploitation in the next 30 days.

The LDAP server (ns-slapd) in Sun Java System Directory Server 5.2 Patch4 and earlier and ONE Directory Server 5.1 and 5.2 allows remote attackers to cause a denial of service (crash) via malformed queries, probably malformed BER queries, which trigger a free of uninitialized memory locations.

Affected products

• Sun Java System Directory Server: version 5.2 only
• Sun One Directory Server: version 5.1 only; version 5.2 only

Published 2007-03-26. Last modified 2026-06-16.