CVE-2001-1321
Oracle Internet Directory Server 2.1.1.x and 3.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via invalid encodings of BER OBJECT-IDENTIFIER values, as demonstrated by the PROTOS LDAPv3 test suite.
Scoring
- CVSS base score
- 0.15
- EPSS probability
- 2.95%
- Published
- 2002-05-03
- Last modified
- 2026-03-16
Affected products
- n/a n/a