CVE-2001-0974

Format string vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.

Date published : 2002-02-02

http://www.securityfocus.com/bid/3048

http://www.cert.org/advisories/CA-2001-18.html