Vulnerability in Critical Path Injoin Directory Server
CVE-2001-1315
Critical Path (1) InJoin Directory Server or (2) LiveContent Directory allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed BER encodings, as demonstrated by the PROTOS LDAPv3 test suite.
EPSS: 0.043 (90.2th percentile) — read the EPSS interpretation.
Affected products
- Critical_path Injoin_directory_server — versions 2.0, 2.1, 3.0
- Critical_path Livecontent_directory — versions 8a3
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_CONFIRM, US Government Resource)
- cve@mitre.org (US Government Resource, Third Party Advisory, x_refsource_CERT, third-party-advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (Patch, government-resource, Vendor Advisory, x_refsource_CIAC, third-party-advisory)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)