The LDAP server (ns-slapd) in Sun Java System Directory Server 5.2 Patch4 and earlier and ONE Directory Server 5.1 and 5.2 allows remote attackers to cause a denial of service (crash) via malformed queries, probably malformed BER queries, which trigger a free of uninitialized memory locations.
AV:N/AC:L/Au:N/C:N/I:N/A:C
This vulnerability has a 3.43% probability of being exploited in the next 30 days, ranking higher than 89% of all scored CVEs.