CVE-2001-1306

iPlanet Directory Server 4.1.4 and earlier (LDAP) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via invalid BER length of length fields, as demonstrated by the PROTOS LDAPv3 test suite.

Scoring

CVSS base score
0.23
EPSS probability
4.61%
Published
2002-05-03
Last modified
2026-03-16

Affected products

Markdown version · Browse all CVEs