Design/Logic Flaw

2006-02-1422:06:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

High

0.014 Low

EPSS

Percentile

86.3%

JSON

The LDAP component in Fedora Directory Server 1.0 allow remote attackers to cause a denial of service (crash) via a certain “bad BER sequence” that results in a free of uninitialized memory, as demonstrated using the ProtoVer LDAP test suite.

CPENameOperatorVersion
fedora_coreeq1.0 directory-server

CPE	Name	Operator	Version
	fedora_core	eq	1.0 directory-server

References

bugzilla.redhat.com/bugzilla/show_bug.cgi?id=179135

secunia.com/advisories/18960

www.securityfocus.com/bid/16677

exchange.xforce.ibmcloud.com/vulnerabilities/24795