iPlanet Directory Server 4.1.4 and earlier (LDAP) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via invalid BER length of length fields, as demonstrated by the PROTOS LDAPv3 test suite.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Iplanet_directory_server | Sun | * | 4.1.4 (including) |