CVE-2001-0975

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 8.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2001-07-16 · updated 2026-06-16

Description

Buffer overflow vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.

Affected products

Oracle Corporation Oracle Internet Directory: 2.1.1, 3.0.1

References

http://otn.oracle.com/deploy/security/pdf/oid_cert_bof.pdf
http://www.cert.org/advisories/CA-2001-18.html
http://www.ciac.org/ciac/bulletins/l-116.shtml
http://www.kb.cert.org/vuls/id/869184
http://www.securityfocus.com/bid/3047
https://exchange.xforce.ibmcloud.com/vulnerabilities/6902
http://otn.oracle.com/deploy/security/pdf/oid_cert_bof.pdf
http://www.cert.org/advisories/CA-2001-18.html
http://www.ciac.org/ciac/bulletins/l-116.shtml
http://www.kb.cert.org/vuls/id/869184
http://www.securityfocus.com/bid/3047
https://exchange.xforce.ibmcloud.com/vulnerabilities/6902

Get alerted when CVE-2001-0975 or the next vulnerability affects your stack