Description
Microsoft Exchange 5.5 2000 allows remote attackers to cause a denial of service (hang) via exceptional BER encodings for the LDAP filter type field, as demonstrated by the PROTOS LDAPv3 test suite.
References
- CA-2001-18 third-party-advisory
- http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/
- L-116 third-party-advisory government-resource
- http://www.kb.cert.org/vuls/id/CFCN-4YAQC7
- exchange-ldap-protos-dos(6899) vdb-entry
- VU#763400 third-party-advisory
- 3045 vdb-entry