CVE-2006-0647: sun java_system_directory_server

EPSS trend

Probability

9.88%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

0.00 pp

From 9.88% on 18-09-2026

18-09-202618-10-2026

EPSS score

9.88%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (lists.immunitysec.com)
Maturity: unknown
exploit-databasedosmultipleVerified
Sun ONE Directory Server 5.2 - Remote Denial of Service
Maturity: poc

References

8 links

secunia.com/advisories/18769Third Party AdvisoryX Refsource SECUNIAVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/24605VDB EntryX Refsource XF
lists.immunitysec.com/pipermail/dailydave/2006-February/002916.htmlMailing ListX Refsource MLIST
www.securityfocus.com/bid/16550VDB EntryX Refsource BID
lists.immunitysec.com/pipermail/dailydave/2006-February/002914.htmlMailing ListX Refsource MLISTExploit
sunsolve.sun.com/search/document.do?assetkey=1-26-102294-1Vendor AdvisoryX Refsource SUNALERT
www.vupen.com/english/advisories/2006/0492VDB EntryX Refsource VUPEN
securitytracker.com/id?1015604VDB EntryX Refsource SECTRACK

Related vulnerabilities

CVE-2007-2466sunjava_system_directory_server+12.97%19y ago02-05-2007 22:00Unspecified vulnerability in the LDAP Software Development Kit (SDK) for C, as used in Sun Java System Directory Server 5.2 up to Patch 4 and Sun ONE Directory Server 5.1, allows remote attackers to cause a denial of service (crash) via certain BER encodings.CVE-2007-3225sunjava_system_directory_server2.22%19y ago14-06-2007 23:00Unspecified vulnerability in Sun Java System Directory Server (slapd) 6.0, and 5.2 with Patch 3 or 4, allows remote attackers to modify certain data via unknown vectors.CVE-2007-3224sunjava_system_directory_server+12.24%19y ago14-06-2007 23:00Unspecified vulnerability in Sun ONE/Java System Directory Server (slapd) 6.0, and 5.x before 5.2 Patch 5, allows remote attackers to determine the existence of attributes of an entry via unspecified vectors.CVE-2005-3269sunjava_system_directory_proxy_server+33.15%21y ago20-10-2005 04:00Stack-based buffer overflow in help.cgi in the HTTP administrative interface for (1) Sun Java System Directory Server 5.2 2003Q4, 2004Q2, and 2005Q1, (2) Red Hat Directory Server and (3) Certificate Server before 7.1 SP1, (4) Sun ONE Directory Server 5.1 SP4 and earlier, and (5) Sun ONE Administration Server 5.2 allows remote attackers to cause a denial of service (admin server crash), or local users to gain root privileges.CVE-2008-1995sunjava_system_directory_server2.18%18y ago28-04-2008 17:00Sun Java System Directory Proxy Server 6.0, 6.1, and 6.2 classifies a connection using the "bind-dn" criteria, which can cause an incorrect application of policy and allows remote attackers to bypass intended access restrictions for the server.CVE-2010-0313sunjava_system_directory_server8.91%16y ago14-01-2010 19:00The core_get_proxyauth_dn function in ns-slapd in Sun Java System Directory Server Enterprise Edition 7.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted LDAP Search Request message.

All vulnerabilities injava_system_directory_server

CVE-2006-0647: sun java_system_directory_server

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References