CVE-2001-1315

HIGH 7.5CVE-2001-1315 · Published 16/07/2001 · updated 16/06/2026

In short

CVE-2001-1315 is a HIGH (CVSS 7.5) vulnerability affecting injoin directory server (critical path), livecontent directory (critical path).
Chance of exploitation in the next 30 days (EPSS): 4.3%, higher than 91.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
injoin directory server critical_path	`= 2.0= 2.1= 3.0= 3.1= 4.0`	No fix yet
livecontent directory critical_path	`= 8a3`	No fix yet

Description

Critical Path (1) InJoin Directory Server or (2) LiveContent Directory allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed BER encodings, as demonstrated by the PROTOS LDAPv3 test suite.

References

archives.neohapsis.com/archives/bugtraq/2001-07/0770.html
ciac.llnl.gov/ciac/bulletins/l-116.shtml · Patch
cert.org/advisories/CA-2001-18.html · Third Party Advisory
ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3
kb.cert.org/vuls/id/657547 · US Government Resource
kb.cert.org/vuls/id/JPLA-4ZKLEM · US Government Resource

More vulnerabilities in injoin directory server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free