Unscored severity · published Jul 16, 2001
CVE-2001-1320
Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via exceptional BER encodings (possibly…
–
CVSS
68.3%
EPSS
No
On KEV
Description
Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via exceptional BER encodings (possibly buffer overflows), as demonstrated by the PROTOS LDAPv3 test suite.
Exploitation
Is it being used?
Exploit prediction (EPSS)68.3% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Keyserver · Pgp
7.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-1320
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-1320
Patch
http://ciac.llnl.gov/ciac/bulletins/l-116.shtml
Third Party Advisory
http://www.cert.org/advisories/CA-2001-18.html
www.ee.oulu.fi
http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/
US Government Resource
http://www.kb.cert.org/vuls/id/765256
US Government Resource
http://www.kb.cert.org/vuls/id/JPLA-4WESNK
Vendor Advisory
http://www.securityfocus.com/bid/3046
More from Keyserver
–
CVE-2001-1252
Network Associates PGP Keyserver 7.0 allows remote attackers to bypass authentication and access the administrative web interface via URLs that directly access cgi-bin instead of…