← Database

CVE-2003-1201

MEDIUM CVSS: 5.0 Published: 2003-03-20 Modified: 2026-06-16

Description

ldbm_back_exop_passwd in the back-ldbm backend in passwd.c for OpenLDAP 2.1.12 and earlier, when the slap_passwd_parse function does not return LDAP_SUCCESS, attempts to free an uninitialized pointer, which allows remote attackers to cause a denial of service (segmentation fault).

Affected Platforms

Openldap Openldap

Weakness Type

CWE-824

References