What’s Vulnerable › Vulnerabilities

CVE-2001-1306

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2001-07-16 · updated 2026-06-16

Description

iPlanet Directory Server 4.1.4 and earlier (LDAP) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via invalid BER length of length fields, as demonstrated by the PROTOS LDAPv3 test suite.

Affected products

• Sun Iplanet Directory Server: through 4.1.4

References

• http://www.cert.org/advisories/CA-2001-18.html
• http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/
• http://www.kb.cert.org/vuls/id/276944
• http://www.kb.cert.org/vuls/id/JPLA-4WESMM
• http://www.cert.org/advisories/CA-2001-18.html
• http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/
• http://www.kb.cert.org/vuls/id/276944
• http://www.kb.cert.org/vuls/id/JPLA-4WESMM

Get alerted when CVE-2001-1306 or the next vulnerability affects your stack