Unscored severity · published Jul 16, 2001
CVE-2001-1321
Oracle Internet Directory Server 2.1.1.x and 3.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via invalid encodings of BER…
–
CVSS
5.8%
EPSS
No
On KEV
Description
Oracle Internet Directory Server 2.1.1.x and 3.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via invalid encodings of BER OBJECT-IDENTIFIER values, as demonstrated by the PROTOS LDAPv3 test suite.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.8% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ID
Internet Directory · Oracle
2.1.1; 3.0.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-1321
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-1321
Patch
http://ciac.llnl.gov/ciac/bulletins/l-116.shtml
Third Party Advisory
http://www.cert.org/advisories/CA-2001-18.html
www.ee.oulu.fi
http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/
US Government Resource
http://www.kb.cert.org/vuls/id/869184
US Government Resource
http://www.kb.cert.org/vuls/id/JPLA-4WESNV
More from Internet Directory
10.0
CVE-2026-83059
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server)
10.0
CVE-2026-61241
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server)
9.9
CVE-2026-61248
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server)
9.8
CVE-2026-83066
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server)
9.8
CVE-2026-83062
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server)