What is CVE-2009-1094?

CVE-2009-1094 is a vulnerability in Sun Jdk. Published 2009-03-25.

Is CVE-2009-1094 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Sun Jdk

CVE-2009-1094

Unspecified vulnerability in the LDAP implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19 and earlier allows remote LDAP servers to execute arbitrary code via unknown vectors related to serialized data.

EPSS: 0.044 (90.3th percentile) — read the EPSS interpretation.

Affected products

Sun Jdk — versions 1.5.0, 1.6.0
Sun Jre — versions 1.5.0, 1.6.0, 1.3.1
Sun Sdk — versions 1.3.1, 1.3.1_01, 1.3.1_01a
N/a — versions n/a

Public proof-of-concept exploits

PalindromeLabs/Java-Deserialization-CVEs

References

cve@mitre.org (vendor-advisory, x_refsource_SUSE)
cve@mitre.org (vendor-advisory, x_refsource_MANDRIVA)
cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
cve@mitre.org (x_refsource_HP, vendor-advisory)
cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
cve@mitre.org (vendor-advisory, x_refsource_SUSE)
cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)

Frequently asked questions

What is CVE-2009-1094?: CVE-2009-1094 is a vulnerability in Sun Jdk. Published 2009-03-25.
Is CVE-2009-1094 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.