Description
Oracle Internet Directory Server 2.1.1.x and 3.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via invalid encodings of BER OBJECT-IDENTIFIER values, as demonstrated by the PROTOS LDAPv3 test suite.
Affected products
- oracle / internet_directory2.1.1 – 2.1.1
- oracle / internet_directory3.0.1 – 3.0.1