CVE-2006-4175

The LDAP server (ns-slapd) in Sun Java System Directory Server 5.2 Patch4 and earlier and ONE Directory Server 5.1 and 5.2 allows remote attackers to cause a denial of service (crash) via malformed queries, probably malformed BER queries, which trigger a free of uninitialized memory locations.

Date published : 2007-03-26

http://www.securityfocus.com/bid/23117

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=491