iPlanet Directory Server 4.1.4 and earlier (LDAP) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via invalid BER length of length fields, as demonstrated by the PROTOS LDAPv3 test suite.
References
| Link | Resource |
|---|---|
| ftp://patches.sgi.com/support/free/security/advisories/20011102-01-I | Vendor Advisory |
| http://www.cert.org/advisories/CA-2001-18.html | Patch Third Party Advisory US Government Resource |
| http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/ | |
| http://www.kb.cert.org/vuls/id/276944 | Third Party Advisory US Government Resource |
| http://www.kb.cert.org/vuls/id/JPLA-4WESMM | US Government Resource |
| ftp://patches.sgi.com/support/free/security/advisories/20011102-01-I | Vendor Advisory |
| http://www.cert.org/advisories/CA-2001-18.html | Patch Third Party Advisory US Government Resource |
| http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/ | |
| http://www.kb.cert.org/vuls/id/276944 | Third Party Advisory US Government Resource |
| http://www.kb.cert.org/vuls/id/JPLA-4WESMM | US Government Resource |
Configurations
History
20 Nov 2024, 23:37
| Type | Values Removed | Values Added |
|---|---|---|
| References | () ftp://patches.sgi.com/support/free/security/advisories/20011102-01-I - Vendor Advisory | |
| References | () http://www.cert.org/advisories/CA-2001-18.html - Patch, Third Party Advisory, US Government Resource | |
| References | () http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/ - | |
| References | () http://www.kb.cert.org/vuls/id/276944 - Third Party Advisory, US Government Resource | |
| References | () http://www.kb.cert.org/vuls/id/JPLA-4WESMM - US Government Resource |
Information
Published : 2001-07-16 04:00
Updated : 2024-11-20 23:37
NVD link : CVE-2001-1306
Mitre link : CVE-2001-1306
CVE.ORG link : CVE-2001-1306
JSON object : View
Products Affected
sun
- iplanet_directory_server
CWE