CVE-2001-1306

iPlanet Directory Server 4.1.4 and earlier (LDAP) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via invalid BER length of length fields, as demonstrated by the PROTOS LDAPv3 test suite.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2001-07-16

Last modified

2024-08-08

Affected products

• Iplanet Directory Server (Sun)

References

• http://www.cert.org/advisories/CA-2001-18.html
• http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/
• http://www.kb.cert.org/vuls/id/276944
• http://www.kb.cert.org/vuls/id/JPLA-4WESMM