Vulnerability Details CVE-2001-0974
Format string vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.027
EPSS Ranking 85.1%
CVSS Severity
CVSS v2 Score 7.5
References
- http://www.cert.org/advisories/CA-2001-18.html
- http://www.ciac.org/ciac/bulletins/l-116.shtml
- http://www.kb.cert.org/vuls/id/869184
- http://www.securityfocus.com/bid/3048
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6903
- http://www.cert.org/advisories/CA-2001-18.html
- http://www.ciac.org/ciac/bulletins/l-116.shtml
- http://www.kb.cert.org/vuls/id/869184
- http://www.securityfocus.com/bid/3048
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6903
Products affected by CVE-2001-0974
-
cpe:2.3:a:oracle:internet_directory:2.1.1
-
cpe:2.3:a:oracle:internet_directory:3.0.1