CVE-2003-1201: Medium severity openldap OpenLDAP vulnerability
Published Mar 20, 2003
·Updated
ldbmbackexoppasswd in the back-ldbm backend in passwd.c for OpenLDAP 2.1.12 and earlier, when the slappasswdparse function does not return LDAPSUCCESS, attempts to free an uninitialized pointer, which allows remote attackers to cause a denial of service (segmentation fault).
Affected Software
38 affected components
openldap OpenLDAP<=2.1.12
openldap OpenLDAP=2.0.2
openldap OpenLDAP=2.0.11_11
openldap OpenLDAP=2.1.15
openldap OpenLDAP=2.1.10
openldap OpenLDAP=2.0.22
openldap OpenLDAP=2.0.9
openldap OpenLDAP=2.0.15
openldap OpenLDAP=2.1.14
openldap OpenLDAP=2.0.14
openldap OpenLDAP=2.0
openldap OpenLDAP=2.0.1
openldap OpenLDAP=2.0.13
openldap OpenLDAP=2.0.20
openldap OpenLDAP=2.0.10
openldap OpenLDAP=2.0.16
openldap OpenLDAP=2.0.23
openldap OpenLDAP=2.0.25
openldap OpenLDAP=2.0.11_11s
openldap OpenLDAP=2.0.27
openldap OpenLDAP=2.0.3
openldap OpenLDAP=2.1.11
openldap OpenLDAP=2.0.7
openldap OpenLDAP=2.0.11_9
openldap OpenLDAP=2.0.12
openldap OpenLDAP=2.0.19
openldap OpenLDAP=2.0.4
openldap OpenLDAP=2.1.12
openldap OpenLDAP=2.0.21
openldap OpenLDAP=2.0.11
openldap OpenLDAP=2.0.8
openldap OpenLDAP=2.1.16
openldap OpenLDAP=2.1.4
openldap OpenLDAP=2.0.17
openldap OpenLDAP=2.0.18
openldap OpenLDAP=2.0.6
openldap OpenLDAP=2.0.5
openldap OpenLDAP=2.1.13
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Mar 20, 2003
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityWeaknessAffected Software
May 10, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2003-1201?
CVE-2003-1201 has a severity level classified as a denial of service vulnerability.
2
How do I fix CVE-2003-1201?
To fix CVE-2003-1201, upgrade OpenLDAP to version 2.1.13 or later.
3
What software is affected by CVE-2003-1201?
CVE-2003-1201 affects OpenLDAP versions 2.1.12 and earlier, as well as certain specific versions in the 2.0.x series.
4
What type of attack does CVE-2003-1201 involve?
CVE-2003-1201 involves a remote attack that leads to a segmentation fault and service disruption.
5
Can CVE-2003-1201 be exploited without authentication?
Yes, CVE-2003-1201 can be exploited by remote attackers without the need for authentication.