CVE-2001-0974

Published: Jul 17, 2001Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Format string vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.

Affected (2)

Products: Oracle: Internet Directory

Oracle

1 product

Internet Directory

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Oracle Internet Directory	Version 2.1.1
Oracle Internet Directory	Version 3.0.1

References (10)

http://www.cert.org/advisories/CA-2001-18.html

Source: cve@mitre.org

PatchThird Party AdvisoryUS Government Resource

http://www.ciac.org/ciac/bulletins/l-116.shtml

Source: cve@mitre.org

PatchVendor Advisory

http://www.kb.cert.org/vuls/id/869184

Source: cve@mitre.org

PatchThird Party AdvisoryUS Government Resource

http://www.securityfocus.com/bid/3048

Source: cve@mitre.org

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/6903

Source: cve@mitre.org

http://www.cert.org/advisories/CA-2001-18.html