CVE-2003-1201: Openldap

Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days.

ldbm_back_exop_passwd in the back-ldbm backend in passwd.c for OpenLDAP 2.1.12 and earlier, when the slap_passwd_parse function does not return LDAP_SUCCESS, attempts to free an uninitialized pointer, which allows remote attackers to cause a denial of service (segmentation fault).

Affected products

• Openldap Openldap: up to and including 2.1.12

Published 2003-03-20. Last modified 2026-06-16.