Lucene search
HistoryMay 03, 2002 - 4:00 a.m.
CVE-2001-1315
cve-2001-1315
critical path
injoin directory
livecontent directory
dos attack
arbitrary code
protos ldapv3
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
High
0.099 Low
EPSS
Percentile
94.9%
Critical Path (1) InJoin Directory Server or (2) LiveContent Directory allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed BER encodings, as demonstrated by the PROTOS LDAPv3 test suite.
Affected configurations
Node
critical_pathinjoin_directory_serverMatch2.0
ORcritical_pathinjoin_directory_serverMatch2.1
ORcritical_pathinjoin_directory_serverMatch3.0
ORcritical_pathinjoin_directory_serverMatch3.1
ORcritical_pathinjoin_directory_serverMatch4.0
ORcritical_pathlivecontent_directoryMatch8a3
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
High
0.099 Low
EPSS
Percentile
94.9%
Related for CVE-2001-1315