Code injection

2006-02-1422:06:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.7%

JSON

Multiple memory leaks in the LDAP component in Fedora Directory Server 1.0 allow remote attackers to cause a denial of service (memory consumption) via invalid BER packets that trigger an error, which might prevent memory from being freed if it was allocated during the ber_scanf call, as demonstrated using the ProtoVer LDAP test suite.

CPENameOperatorVersion
fedora_coreeq1.0 directory-server

CPE	Name	Operator	Version
	fedora_core	eq	1.0 directory-server

References

bugzilla.redhat.com/bugzilla/show_bug.cgi?id=179135

secunia.com/advisories/18960

www.securityfocus.com/bid/16677

exchange.xforce.ibmcloud.com/vulnerabilities/24794