Description
LdapCtx in the LDAP service in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19 and earlier does not close the connection when initialization fails, which allows remote attackers to cause a denial of service (LDAP service hang).
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-1769-1 | New openjdk-6 packages fix arbitrary code execution |
EUVD |
EUVD-2009-1094 | LdapCtx in the LDAP service in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19 and earlier does not close the connection when initialization fails, which allows remote attackers to cause a denial of service (LDAP service hang). |
Ubuntu USN |
USN-748-1 | OpenJDK vulnerabilities |
References
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T04:57:17.813Z
Reserved: 2009-03-25T00:00:00.000Z
Link: CVE-2009-1093
No data.
Status : Modified
Published: 2009-03-25T23:30:00.203
Modified: 2026-04-23T00:35:47.467
Link: CVE-2009-1093
OpenCVE Enrichment
No data.
Weaknesses
Debian DSA
EUVD
Ubuntu USN