CVE-2001-1306

ALTO 7.5CVE-2001-1306 · Published 16/07/2001 · updated 16/06/2026

In breve

CVE-2001-1306 è una vulnerabilità ALTO (CVSS 7.5) che riguarda iplanet directory server (sun).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 4.1%, superiore al 90.7% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
iplanet directory server sun	`≤ 4.1.4`	No fix yet

Description

iPlanet Directory Server 4.1.4 and earlier (LDAP) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via invalid BER length of length fields, as demonstrated by the PROTOS LDAPv3 test suite.

References

patches.sgi.com/support/free/security/advisories/20011102-01-I · Vendor Advisory
cert.org/advisories/CA-2001-18.html · Patch
ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3
kb.cert.org/vuls/id/276944 · Third Party Advisory
kb.cert.org/vuls/id/JPLA-4WESMM · US Government Resource

Altre vulnerabilità di iplanet directory server

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free