CVE-2006-0647

CVE-2006-0647 describes a denial-of-service vulnerability affecting the LDAP service in Sun Java System Directory Server 5.2 on Linux and potentially other platforms. An unauthenticated remote attacker can exploit this by sending a specially crafted LDAP packet containing a subtree search request, leading to a memory allocation error and service disruption. With a CVSS score of 5.0 (medium severity) and a FAUCET Risk Score of 90/100, this vulnerability is easily exploitable over the network with low attack complexity, resulting in a partial availability impact. While not listed in CISA's KEV catalog, an exploit (EDB-27171) is publicly available, though there is no evidence of active exploitation or significant community discussion.