CVE-2001-1320

50Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 68%

from disclosure to weapon3117 days

Published on NVDMay 3

1st PoC+3117d

metasploitJul 16

exploitation probability

68%top 1% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via exceptional BER encodings (possibly buffer overflows), as demonstrated by the PROTOS LDAPv3 test suite.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/16823

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://ciac.llnl.gov/ciac/bulletins/l-116.shtml https://exchange.xforce.ibmcloud.com/vulnerabilities/6900 http://www.cert.org/advisories/CA-2001-18.html http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/http://www.kb.cert.org/vuls/id/765256 http://www.kb.cert.org/vuls/id/JPLA-4WESNK http://www.securityfocus.com/bid/3046