Unscored severity · published Jul 16, 2001
CVE-2001-1306
iPlanet Directory Server 4.1.4 and earlier (LDAP) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via invalid BER length of length…
–
CVSS
4.1%
EPSS
No
On KEV
Description
iPlanet Directory Server 4.1.4 and earlier (LDAP) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via invalid BER length of length fields, as demonstrated by the PROTOS LDAPv3 test suite.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.1% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ID
Iplanet Directory Server · Sun
through 4.1.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-1306
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-1306
Patch
http://www.cert.org/advisories/CA-2001-18.html
www.ee.oulu.fi
http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/
Third Party Advisory
http://www.kb.cert.org/vuls/id/276944
US Government Resource
http://www.kb.cert.org/vuls/id/JPLA-4WESMM
More from Iplanet Directory Server
–
CVE-2003-0676
Directory traversal vulnerability in ViewLog for iPlanet Administration Server 5.1 (aka Sun ONE) allows remote attackers to read arbitrary files via "..%2f" (partially encoded dot…
–
CVE-2001-1307
Buffer overflows in iPlanet Directory Server 4.1.4 and earlier (LDAP) allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as…
–
CVE-2001-1308
Format string vulnerabilities in iPlanet Directory Server 4.1.4 and earlier (LDAP) allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code,…