Zero Day Initiative Advisory 10-074 – This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Sun Microsystems Directory Service Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within Sun Directory Server’s LDAP implementation and can be triggered via a malformed LDAP query to the service. When the service decodes the malformed query, the application will cause a buffer overflow which can lead to code execution under the context of the service.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/88342/ZDI-10-074.txt
Source: https://packetstormsecurity.com/files/88342/Zero-Day-Initiative-Advisory-10-074.html