CVE-2001-0974

Format string vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2001-07-17

Last modified

2024-08-08

Affected products

• Internet Directory (Oracle)

References

• http://www.cert.org/advisories/CA-2001-18.html
• http://www.ciac.org/ciac/bulletins/l-116.shtml
• http://www.kb.cert.org/vuls/id/869184
• http://www.securityfocus.com/bid/3048
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6903