Critical Path (1) InJoin Directory Server or (2) LiveContent Directory allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed BER encodings, as demonstrated by the PROTOS LDAPv3 test suite.
                
            References
                    | Link | Resource | 
|---|---|
| http://archives.neohapsis.com/archives/bugtraq/2001-07/0770.html | |
| http://ciac.llnl.gov/ciac/bulletins/l-116.shtml | Patch Vendor Advisory | 
| http://www.cert.org/advisories/CA-2001-18.html | Third Party Advisory US Government Resource | 
| http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/ | |
| http://www.kb.cert.org/vuls/id/657547 | US Government Resource | 
| http://www.kb.cert.org/vuls/id/JPLA-4ZKLEM | US Government Resource | 
| http://archives.neohapsis.com/archives/bugtraq/2001-07/0770.html | |
| http://ciac.llnl.gov/ciac/bulletins/l-116.shtml | Patch Vendor Advisory | 
| http://www.cert.org/advisories/CA-2001-18.html | Third Party Advisory US Government Resource | 
| http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/ | |
| http://www.kb.cert.org/vuls/id/657547 | US Government Resource | 
| http://www.kb.cert.org/vuls/id/JPLA-4ZKLEM | US Government Resource | 
Configurations
                    Configuration 1 (hide)
| 
 | 
History
                    20 Nov 2024, 23:37
| Type | Values Removed | Values Added | 
|---|---|---|
| References | () http://archives.neohapsis.com/archives/bugtraq/2001-07/0770.html - | |
| References | () http://ciac.llnl.gov/ciac/bulletins/l-116.shtml - Patch, Vendor Advisory | |
| References | () http://www.cert.org/advisories/CA-2001-18.html - Third Party Advisory, US Government Resource | |
| References | () http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/ - | |
| References | () http://www.kb.cert.org/vuls/id/657547 - US Government Resource | |
| References | () http://www.kb.cert.org/vuls/id/JPLA-4ZKLEM - US Government Resource | 
Information
                Published : 2001-07-16 04:00
Updated : 2025-04-03 01:03
NVD link : CVE-2001-1315
Mitre link : CVE-2001-1315
CVE.ORG link : CVE-2001-1315
JSON object : View
Products Affected
                critical_path
- livecontent_directory
- injoin_directory_server
CWE
                