Oracle Internet Directory Server 2.1.1.x and 3.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via invalid encodings of BER OBJECT-IDENTIFIER values, as demonstrated by the PROTOS LDAPv3 test suite.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2002-05-03T04:00:00

Updated: 2024-08-08T04:51:08.423Z

Reserved: 2002-05-01T00:00:00

Link: CVE-2001-1321

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2001-07-16T04:00:00.000

Modified: 2008-09-05T20:26:14.983

Link: CVE-2001-1321

cve-icon Redhat

No data.