CVE-2010-0313 Null dereference in n/a

What is CVE-2010-0313?

CVE-2010-0313 is a medium-severity vulnerability in n/a, published on 14 Jan 2010. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The core_get_proxyauth_dn function in ns-slapd in Sun Java System Directory Server Enterprise Edition 7.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted LDAP Search Request message.

Which versions are affected by CVE-2010-0313?

It affects 1 product.

Products include Sun Java System Directory Server.

How do I fix CVE-2010-0313?

No fix has been published for CVE-2010-0313 yet. Limit exposure of the affected software until one is available.

Is CVE-2010-0313 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2010-0313 exists.

Public exploit code: 1 Exploit-DB entry.

Other vulnerabilities in n/a

• CVE-2009-0609 Denial of service in n/a High 7.8
• CVE-2009-0576 Denial of service in n/a High 7.8
• CVE-2007-2466 Denial of service in n/a High 7.8
• CVE-2006-4175 Denial of service in n/a High 7.8
• CVE-2008-1995 Auth bypass in n/a High 7.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-pxhw-m5jj-mmp6.