CVE-2001-0975

Published: Jul 16, 2001Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Buffer overflow vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.

Affected (2)

Products: Oracle: Internet Directory

Oracle

1 product

Internet Directory

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Oracle Internet Directory	Version 2.1.1
Oracle Internet Directory	Version 3.0.1

References (12)

http://otn.oracle.com/deploy/security/pdf/oid_cert_bof.pdf

Source: cve@mitre.org

http://www.cert.org/advisories/CA-2001-18.html

Source: cve@mitre.org

PatchThird Party AdvisoryUS Government Resource

http://www.ciac.org/ciac/bulletins/l-116.shtml

Source: cve@mitre.org

PatchVendor Advisory

http://www.kb.cert.org/vuls/id/869184

Source: cve@mitre.org

PatchThird Party AdvisoryUS Government Resource

http://www.securityfocus.com/bid/3047

Source: cve@mitre.org

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/6902

Source: cve@mitre.org

http://otn.oracle.com/deploy/security/pdf/oid_cert_bof.pdf