Sun One Directory Server vulnerabilities
6 CVEs affecting Sun One Directory Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-3224, published 2007-06-14.
More from Sun.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2006-4175, published 2007-03-26. High severity, CVSS 7.8. EPSS: 3.4% chance of exploitation in the next 30 days. The LDAP server (ns-slapd) in Sun Java System Directory Server 5.2 Patch4 and earlier and ONE Directory Server 5.1 and 5.2 allows remote attackers to cause a denial of service (crash) via malformed…
- CVE-2005-3269, published 2005-10-20. High severity, CVSS 7.5. EPSS: 3.1% chance of exploitation in the next 30 days. Stack-based buffer overflow in help.cgi in the HTTP administrative interface for (1) Sun Java System Directory Server 5.2 2003Q4, 2004Q2, and 2005Q1, (2) Red Hat Directory Server and (3) Certificate…
- CVE-2007-2466, published 2007-05-02. High severity, CVSS 7.8. EPSS: 3% chance of exploitation in the next 30 days. Unspecified vulnerability in the LDAP Software Development Kit (SDK) for C, as used in Sun Java System Directory Server 5.2 up to Patch 4 and Sun ONE Directory Server 5.1, allows remote attackers to…
- CVE-2007-3224, published 2007-06-14. Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days. Unspecified vulnerability in Sun ONE/Java System Directory Server (slapd) 6.0, and 5.x before 5.2 Patch 5, allows remote attackers to determine the existence of attributes of an entry via unspecified…
- CVE-2003-0676, published 2003-08-27. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. Directory traversal vulnerability in ViewLog for iPlanet Administration Server 5.1 (aka Sun ONE) allows remote attackers to read arbitrary files via "..%2f" (partially encoded dot dot) sequences.
- CVE-2003-1125, published 2003-12-31. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. Unknown vulnerability in ns-ldapd for Sun ONE Directory Server 4.16, 5.0, and 5.1 allows LDAP clients to cause a denial of service (service halt).