Description
IBM SecureWay 3.2.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, via invalid encodings for the L field of a BER encoding, as demonstrated by the PROTOS LDAPv3 test suite.
References
- secureway-ldap-protos-dos(6894) vdb-entry
- CA-2001-18 third-party-advisory
- http://www.kb.cert.org/vuls/id/CFCR-4YQ33Y
- http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/
- L-116 third-party-advisory government-resource
- VU#505564 third-party-advisory
- 3040 vdb-entry