CVE-2001-0974

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

6.31%

Published

Jul 17, 2001

Modified

Jun 16, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Format string vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.

Affected Products (2)

oracle · internet_directoryvulnerable

References (10)

http://www.cert.org/advisories/CA-2001-18.html

PatchThird Party AdvisoryUS Government Resource

http://www.ciac.org/ciac/bulletins/l-116.shtml

PatchVendor Advisory

http://www.kb.cert.org/vuls/id/869184

PatchThird Party AdvisoryUS Government Resource

http://www.securityfocus.com/bid/3048

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/6903

http://www.cert.org/advisories/CA-2001-18.html

PatchThird Party AdvisoryUS Government Resource

http://www.ciac.org/ciac/bulletins/l-116.shtml

PatchVendor Advisory

http://www.kb.cert.org/vuls/id/869184

PatchThird Party AdvisoryUS Government Resource

http://www.securityfocus.com/bid/3048

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/6903

KEV Catalog EPSS Scores Vendors All CVEs