CVE-2001-1315

Опубликовано: 16 июл. 2001

Источник: nvd

CVSS2: 7.5

EPSS Средний

Описание

Critical Path (1) InJoin Directory Server or (2) LiveContent Directory allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed BER encodings, as demonstrated by the PROTOS LDAPv3 test suite.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2001-07/0770.html
http://ciac.llnl.gov/ciac/bulletins/l-116.shtml
Patch
Vendor Advisory
http://www.cert.org/advisories/CA-2001-18.html
Third Party Advisory
US Government Resource
http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/
http://www.kb.cert.org/vuls/id/657547
US Government Resource
http://www.kb.cert.org/vuls/id/JPLA-4ZKLEM
US Government Resource
http://archives.neohapsis.com/archives/bugtraq/2001-07/0770.html
http://ciac.llnl.gov/ciac/bulletins/l-116.shtml
Patch
Vendor Advisory
http://www.cert.org/advisories/CA-2001-18.html
Third Party Advisory
US Government Resource
http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/
http://www.kb.cert.org/vuls/id/657547
US Government Resource
http://www.kb.cert.org/vuls/id/JPLA-4ZKLEM
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:critical_path:injoin_directory_server:2.0:*:*:*:*:*:*:*

cpe:2.3:a:critical_path:injoin_directory_server:2.1:*:*:*:*:*:*:*

cpe:2.3:a:critical_path:injoin_directory_server:3.0:*:*:*:*:*:*:*

cpe:2.3:a:critical_path:injoin_directory_server:3.1:*:*:*:*:*:*:*

cpe:2.3:a:critical_path:injoin_directory_server:4.0:*:*:*:*:*:*:*

cpe:2.3:a:critical_path:livecontent_directory:8a3:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.11264

Средний

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-6394-7jc3-v463

github

больше 3 лет назад