Sun One Directory Server vulnerabilities

6 vulnerabilities

Known vulnerabilities in Sun One Directory Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5CVE-2003-1125sunone_directory_server
EPSS score
1.16%
Unknown vulnerability in ns-ldapd for Sun ONE Directory Server 4.16, 5.0, and 5.1 allows LDAP clients to cause a denial of service (service halt).5CVE-2003-0676suniplanet_directory_server+1
EPSS score
1.63%
Directory traversal vulnerability in ViewLog for iPlanet Administration Server 5.1 (aka Sun ONE) allows remote attackers to read arbitrary files via "..%2f" (partially encoded dot dot) sequences.7.8CVE-2007-2466sunjava_system_directory_server+1
EPSS score
2.97%
Unspecified vulnerability in the LDAP Software Development Kit (SDK) for C, as used in Sun Java System Directory Server 5.2 up to Patch 4 and Sun ONE Directory Server 5.1, allows remote attackers to cause a denial of service (crash) via certain BER encodings.5CVE-2007-3224sunjava_system_directory_server+1
EPSS score
2.24%
Unspecified vulnerability in Sun ONE/Java System Directory Server (slapd) 6.0, and 5.x before 5.2 Patch 5, allows remote attackers to determine the existence of attributes of an entry via unspecified vectors.7.5CVE-2005-3269sunjava_system_directory_proxy_server+3
EPSS score
3.15%
Stack-based buffer overflow in help.cgi in the HTTP administrative interface for (1) Sun Java System Directory Server 5.2 2003Q4, 2004Q2, and 2005Q1, (2) Red Hat Directory Server and (3) Certificate Server before 7.1 SP1, (4) Sun ONE Directory Server 5.1 SP4 and earlier, and (5) Sun ONE Administration Server 5.2 allows remote attackers to cause a denial of service (admin server crash), or local users to gain root privileges.7.8CVE-2006-4175sunjava_system_directory_server+1
EPSS score
3.43%
The LDAP server (ns-slapd) in Sun Java System Directory Server 5.2 Patch4 and earlier and ONE Directory Server 5.1 and 5.2 allows remote attackers to cause a denial of service (crash) via malformed queries, probably malformed BER queries, which trigger a free of uninitialized memory locations.