cve/2009/CVE-2009-1094.md

CVE-2009-1094

Description

Unspecified vulnerability in the LDAP implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19 and earlier allows remote LDAP servers to execute arbitrary code via unknown vectors related to serialized data.

POC

Reference

• http://www.redhat.com/support/errata/RHSA-2009-1038.html
• http://www.vmware.com/security/advisories/VMSA-2009-0016.html

Github

• https://github.com/PalindromeLabs/Java-Deserialization-CVEs