CVE-2009-0609

Sun Java System Directory Proxy Server in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3, when a JDBC data source is used, does not properly handle (1) a long value in an ADD or (2) long string attributes, which allows remote attackers to cause a denial of service (JDBC backend outage) via crafted LDAP requests.

• CWE-20

• http://secunia.com/advisories/33923Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-125276-08-1Patch, Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-251086-1Patch, Vendor Advisory
• http://www.securityfocus.com/bid/33761
• http://secunia.com/advisories/33923Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-125276-08-1Patch, Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-251086-1Patch, Vendor Advisory
• http://www.securityfocus.com/bid/33761

Published

Feb 17, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-0603Cross-site scripting (XSS) vulnerability in index.php in the…
• CVE-2009-0604SQL injection vulnerability in index.php in PHP Director 0.2…
• CVE-2009-0605Stack consumption vulnerability in the do_page_fault functio…
• CVE-2009-0606The link_image function in linker/linker.c in the dynamic li…
• CVE-2009-0607Multiple integer overflows in malloc_leak.c in Bionic in Ope…
• CVE-2009-0608Integer overflow in the showLog function in fake_log_device.…
• CVE-2009-0610Multiple static code injection vulnerabilities in post.php i…
• CVE-2009-0611Multiple cross-site scripting (XSS) vulnerabilities in qfsea…
• CVE-2009-0612Trend Micro InterScan Web Security Virtual Appliance (IWSVA)…
• CVE-2009-0613Trend Micro InterScan Web Security Suite (IWSS) 3.1 before b…
• CVE-2009-0614Unspecified vulnerability in the Web Server in Cisco Unified…
• CVE-2009-0615Directory traversal vulnerability in Cisco Application Netwo…