Unscored severity · published Jul 17, 2001
CVE-2001-0974
Format string vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the PROTOS LDAPv3…
–
CVSS
6.3%
EPSS
No
On KEV
Description
Format string vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.3% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ID
Internet Directory · Oracle
2.1.1; 3.0.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-0974
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-0974
Patch
http://www.cert.org/advisories/CA-2001-18.html
Patch
http://www.ciac.org/ciac/bulletins/l-116.shtml
Patch
http://www.kb.cert.org/vuls/id/869184
Patch
http://www.securityfocus.com/bid/3048
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/6903
More from Internet Directory
10.0
CVE-2026-83059
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server)
10.0
CVE-2026-61241
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server)
9.9
CVE-2026-61248
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server)
9.8
CVE-2026-83066
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server)
9.8
CVE-2026-83062
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server)