Vulnerability Details : CVE-2010-0708
Multiple unspecified vulnerabilities in (1) ns-slapd and (2) slapd.exe in Sun Directory Server Enterprise Edition 7.0, Sun Java System Directory Server 5.2, and Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 allow remote attackers to cause a denial of service (daemon crash) via a crafted LDAP search request.
Vulnerability category: Denial of service
Exploit prediction scoring system (EPSS) score for CVE-2010-0708
Probability of exploitation activity in the next 30 days: 0.66%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 77 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2010-0708
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:N/A:P |
10.0
|
2.9
|
NIST |
References for CVE-2010-0708
-
http://sunsolve.sun.com/search/document.do?assetkey=1-26-275711-1
Patch;Vendor Advisory
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/56603
Sun Java System Directory Server ns-slapd and slapd.exe denial of service CVE-2010-0708 Vulnerability Report
-
http://sunsolve.sun.com/search/document.do?assetkey=1-21-143884-01-1
Patch
-
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021788.1-1
Products affected by CVE-2010-0708
- cpe:2.3:a:sun:java_system_directory_server:5.2:*:*:*:*:*:*:*
- cpe:2.3:a:sun:java_system_directory_server:7.0:-:enterprise:*:*:*:*:*
- cpe:2.3:a:sun:java_system_directory_server:6.3.1:-:enterprise:*:*:*:*:*
- cpe:2.3:a:sun:java_system_directory_server:6.0:-:enterprise:*:*:*:*:*
- cpe:2.3:a:sun:java_system_directory_server:6.3:-:enterprise:*:*:*:*:*
- cpe:2.3:a:sun:java_system_directory_server:6.2:-:enterprise:*:*:*:*:*
- cpe:2.3:a:sun:java_system_directory_server:6.1:-:enterprise:*:*:*:*:*