security flaw

Vulnerabilities in a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via SNMPv1 trap handling, as demonstrated by the PROTOS c06-SNMPv1 test suite. NOTE: It is highly likely that this candidate will be SPLIT into multiple candidates, one...

CVE-2001-1319

Microsoft Exchange 5.5 2000 allows remote attackers to cause a denial of service hang via exceptional BER encodings for the LDAP filter type field, as demonstrated by the PROTOS LDAPv3 test suite...

CVE-2001-1309

CVE-2001-1309 concerns IBM SecureWay Directory/3.2.1 with buffer overflow vulnerabilities in LDAP processing. The CERT/IBM-disclosed issues indicate remote attackers could crash affected servers (DoS) and potentially execute arbitrary code, as demonstrated by PROTOS LDAPv3 test suites. Documented...

CVE-2001-1306

iPlanet Directory Server 4.1.4 and earlier LDAP allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via invalid BER length of length fields, as demonstrated by the PROTOS LDAPv3 test suite...

CVE-2001-1310: Undefined Security Weakness

IBM SecureWay 3.2.1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code, via invalid encodings for the L field of a BER encoding, as demonstrated by the PROTOS LDAPv3 test suite...

CVE-2001-0701

The CVE-2001-0701 issue affects the SunVTS package (Sun Microsystems) and its ptexec binary. ptexec in SUNWvts is vulnerable to a buffer overflow when an overly long -o argument (roughly 400+ characters) is supplied, allowing a local user to execute arbitrary code with root privileges. SunVTS ver...

CVE-2001-0701

Buffer overflow in ptexec in the Sun Validation Test Suite 4.3 and earlier allows a local user to gain privileges via a long -o argument...

CVE-2001-0701: Undefined Security Weakness

Buffer overflow in ptexec in the Sun Validation Test Suite 4.3 and earlier allows a local user to gain privileges via a long -o argument...

CVE-2002-0013

CVE-2002-0013 concerns numerous SNMPv1 implementation flaws that allow remote DoS or privilege escalation via SNMP GetRequest, GetNextRequest, and SetRequest messages, demonstrated by the PROTOS c06-SNMPv1 test suite. The vulnerability is described across multiple advisories and vendors (e.g., AR...

CVE-2002-0012

Vulnerabilities in a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via SNMPv1 trap handling, as demonstrated by the PROTOS c06-SNMPv1 test suite. NOTE: It is highly likely that this candidate will be SPLIT into multiple candidates, one...

Multiple vulnerabilities in SNMPv1 request handling

Overview Multiple vendor SNMPv1 GetRequest, GetNextRequest , and SetRequest message handling implementations contain vulnerabilities that may allow unauthorized privileged access, denial-of-service conditions, or unstable behavior. If your site uses SNMP in any capacity, the CERT/CC encourages yo...

CVE-2001-0974: Undefined Security Weakness

Format string vulnerabilities in Oracle Internet Directory Server LDAP 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite...

CVE-2001-0701

Buffer overflow in ptexec in the Sun Validation Test Suite 4.3 and earlier allows a local user to gain privileges via a long -o argument...

Microsoft Exchange LDAP Service is vulnerable to denial-of-service attacks

Overview The Microsoft Exchange LDAP Service contains vulnerabilities that may allow denial-of-service attacks. These vulnerabilities were revealed using the PROTOS LDAPv3 test suite and are documented in CERT Advisory CA-2001-18. If your site uses this product, the CERT/CC encourages you to foll...

CVE-2001-1316

Buffer overflows in Teamware Office Enterprise Directory allows remote attackers to cause a denial of service crash and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite...