Sun Iplanet Directory Server vulnerabilities

4 CVEs affecting Sun Iplanet Directory Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2003-0676, published 2003-08-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2001-1307, published 2001-07-16. High severity, CVSS 7.5. EPSS: 5.3% chance of exploitation in the next 30 days. Buffer overflows in iPlanet Directory Server 4.1.4 and earlier (LDAP) allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS…
CVE-2001-1308, published 2001-07-16. High severity, CVSS 7.5. EPSS: 4.6% chance of exploitation in the next 30 days. Format string vulnerabilities in iPlanet Directory Server 4.1.4 and earlier (LDAP) allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by…
CVE-2001-1306, published 2001-07-16. High severity, CVSS 7.5. EPSS: 4.1% chance of exploitation in the next 30 days. iPlanet Directory Server 4.1.4 and earlier (LDAP) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via invalid BER length of length fields, as…
CVE-2003-0676, published 2003-08-27. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. Directory traversal vulnerability in ViewLog for iPlanet Administration Server 5.1 (aka Sun ONE) allows remote attackers to read arbitrary files via "..%2f" (partially encoded dot dot) sequences.