5
CVSSv2

CVE-2001-0977

Published: 16/07/2001 Updated: 10/10/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

slapd in OpenLDAP 1.x prior to 1.2.12, and 2.x prior to 2.0.8, allows remote malicious users to cause a denial of service (crash) via an invalid Basic Encoding Rules (BER) length field.

Vulnerable Product Search on Vulmon Subscribe to Product

mandrakesoft mandrake single network firewall 7.2

openldap openldap 1.1.2

openldap openldap 1.1.3

openldap openldap 1.2.2

openldap openldap 1.2.3

openldap openldap 2.0.1

openldap openldap 2.0.2

openldap openldap 1.1

openldap openldap 1.1.1

openldap openldap 1.2.11

openldap openldap 1.2.12

openldap openldap 1.2.9

openldap openldap 2.0

openldap openldap 2.0.7

openldap openldap 1.0

openldap openldap 1.0.1

openldap openldap 1.1.4

openldap openldap 1.2

openldap openldap 1.2.4

openldap openldap 1.2.5

openldap openldap 2.0.3

openldap openldap 2.0.4

openldap openldap 1.0.2

openldap openldap 1.0.3

openldap openldap 1.2.1

openldap openldap 1.2.10

openldap openldap 1.2.6

openldap openldap 1.2.7

openldap openldap 1.2.8

openldap openldap 2.0.5

openldap openldap 2.0.6

debian debian linux 2.2

mandrakesoft mandrake linux 7.1

redhat linux 7.0

redhat linux 7.1

mandrakesoft mandrake linux 7.2

mandrakesoft mandrake linux 8.0

mandrakesoft mandrake linux corporate server 1.0.1

redhat linux 6.2

Vendor Advisories

The CERT advisory lists a number of vulnerabilities in various LDAP implementations, based on the results of the PROTOS LDAPv3 test suite These tests found one problem in OpenLDAP, a free LDAP implementation which is shipped as part of Debian GNU/Linux 22 The problem is that slapd did not handle packets which had BER fields of invalid length and ...