CVE-2009-1093

OpenJDK remote LDAP Denial-Of-Service (6717680)

Published Mar 25, 2009 CVSS 2.0 · 5.0 Medium EPSS 3.4% KEV · Not listed
Description
LdapCtx in the LDAP service in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19 and earlier does not close the connection when initialization fails, which allows remote attackers to cause a denial of service (LDAP service hang).

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1769-1 New openjdk-6 packages fix arbitrary code execution
EUVD EUVD EUVD-2009-1094 LdapCtx in the LDAP service in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19 and earlier does not close the connection when initialization fails, which allows remote attackers to cause a denial of service (LDAP service hang).
Ubuntu USN Ubuntu USN USN-748-1 OpenJDK vulnerabilities
References
Link Providers
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133 cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html cve-icon cve-icon
http://marc.info/?l=bugtraq&m=124344236532162&w=2 cve-icon cve-icon
http://secunia.com/advisories/34489 cve-icon cve-icon
http://secunia.com/advisories/34495 cve-icon cve-icon
http://secunia.com/advisories/34496 cve-icon cve-icon
http://secunia.com/advisories/34632 cve-icon cve-icon
http://secunia.com/advisories/34675 cve-icon cve-icon
http://secunia.com/advisories/35156 cve-icon cve-icon
http://secunia.com/advisories/35223 cve-icon cve-icon
http://secunia.com/advisories/35255 cve-icon cve-icon
http://secunia.com/advisories/35416 cve-icon cve-icon
http://secunia.com/advisories/35776 cve-icon cve-icon
http://secunia.com/advisories/36185 cve-icon cve-icon
http://secunia.com/advisories/37386 cve-icon cve-icon
http://secunia.com/advisories/37460 cve-icon cve-icon
http://security.gentoo.org/glsa/glsa-200911-02.xml cve-icon cve-icon
http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-19-1 cve-icon cve-icon
http://sunsolve.sun.com/search/document.do?assetkey=1-66-254569-1 cve-icon cve-icon
http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm cve-icon cve-icon
http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm cve-icon cve-icon
http://www.debian.org/security/2009/dsa-1769 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2009:137 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2009:162 cve-icon cve-icon
http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2009-0392.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2009-0394.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2009-1038.html cve-icon cve-icon
http://www.securityfocus.com/archive/1/507985/100/0/threaded cve-icon cve-icon
http://www.securityfocus.com/bid/34240 cve-icon cve-icon
http://www.securitytracker.com/id?1021893 cve-icon cve-icon
http://www.ubuntu.com/usn/usn-748-1 cve-icon cve-icon
http://www.vmware.com/security/advisories/VMSA-2009-0016.html cve-icon cve-icon
http://www.vupen.com/english/advisories/2009/1426 cve-icon cve-icon
http://www.vupen.com/english/advisories/2009/3316 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2009-1093 cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11343 cve-icon cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6676 cve-icon cve-icon
https://rhn.redhat.com/errata/RHSA-2009-0377.html cve-icon cve-icon
https://rhn.redhat.com/errata/RHSA-2009-1198.html cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2009-1093 cve-icon
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 4:57 AM
Reserved
Mar 25, 2009, 12:00 AM
Status
Modified
Published
Mar 25, 2009, 11:30 PM
Modified
Jun 16, 2026, 11:06 PM
Severity
Important
Public date
Mar 25, 2009, 12:00 AM