Security Advisory

CVE-2009-4440

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2009-12-28 19:00:00

Last updated 2024-08-07 07:01:20

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 does not properly handle multiple client connections within a short time window, which allows remote attackers to hijack the backend connection of an authenticated user, and obtain the privileges of this user, by making a client connection in opportunistic circumstances, related to "long binds," aka Bug Ids 6828462 and 6823593.

← Browse all CVEs View on cve.org ↗