Unrated severityNVD Advisory· Published Mar 20, 2003· Updated Jun 16, 2026

CVE-2003-1201

Description

ldbm_back_exop_passwd in the back-ldbm backend in passwd.c for OpenLDAP 2.1.12 and earlier, when the slap_passwd_parse function does not return LDAP_SUCCESS, attempts to free an uninitialized pointer, which allows remote attackers to cause a denial of service (segmentation fault).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

OpenLDAP/Openldap2 versions
cpe:2.3:a:openldap:openldap:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:openldap:openldap:*:*:*:*:*:*:*:*range: <=2.1.12
- (no CPE)range: <=2.1.12

Patches

Vulnerability mechanics

References

distro.conectiva.com.br/atualizacoes/nvdBroken LinkPatch
secunia.com/advisories/11261nvdBroken LinkPatch
secunia.com/advisories/9203nvdBroken LinkPatch
www.openldap.org/its/index.cginvdIssue TrackingPatch
www.securityfocus.com/bid/7656nvdBroken LinkPatchThird Party AdvisoryVDB Entry
security.gentoo.org/glsa/glsa-200403-12.xmlnvdThird Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/12520nvdThird Party AdvisoryVDB Entry
www.osvdb.org/17000nvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000