Teamware Office Enterprise Directory allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, via invalid encodings for certain BER object types, as demonstrated by the PROTOS LDAPv3 test suite.
References
Link | Resource |
---|---|
http://www.cert.org/advisories/CA-2001-18.html | Third Party Advisory US Government Resource |
http://ciac.llnl.gov/ciac/bulletins/l-116.shtml | Patch Vendor Advisory |
http://www.kb.cert.org/vuls/id/688960 | US Government Resource |
http://www.kb.cert.org/vuls/id/JPLA-4WESNA | US Government Resource |
http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/ |
Configurations
Configuration 1 (hide)
|
Information
Published : 2001-07-15 21:00
Updated : 2008-09-05 13:26
NVD link : CVE-2001-1317
Mitre link : CVE-2001-1317
JSON object : View
CWE
Products Affected
teamware
- teamware_office