CVE-2009-4443

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-12-28 · updated 2026-06-16

Description

Unspecified vulnerability in the psearch (aka persistent search) functionality in Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 allows remote attackers to cause a denial of service (psearch outage) by using a crafted psearch client to send requests that trigger a psearch thread loop, aka Bug Id 6855978.

Affected products

Sun Java System Directory Server: 6.0, 6.1-enterprise, 6.2-enterprise, 6.3-enterprise, 6.3.1-enterprise

References

http://secunia.com/advisories/37915
http://sunsolve.sun.com/search/document.do?assetkey=1-21-141958-01-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-270789-1
http://www.securityfocus.com/bid/37481
http://www.securitytracker.com/id?1023389
http://www.vupen.com/english/advisories/2009/3647
http://secunia.com/advisories/37915
http://sunsolve.sun.com/search/document.do?assetkey=1-21-141958-01-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-270789-1
http://www.securityfocus.com/bid/37481
http://www.securitytracker.com/id?1023389
http://www.vupen.com/english/advisories/2009/3647

Get alerted when CVE-2009-4443 or the next vulnerability affects your stack