Description
Format string vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
References
- oracle-ldap-protos-format-string(6903) vdb-entry
- 3048 vdb-entry
- CA-2001-18 third-party-advisory
- VU#869184 third-party-advisory
- L-116 third-party-advisory government-resource