Unscored severity · published Jan 2, 2003
CVE-2002-1379
OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows remote or local attackers to execute arbitrary code when libldap reads the .ldaprc file within applications that are running with…
–
CVSS
2.9%
EPSS
No
On KEV
Description
OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows remote or local attackers to execute arbitrary code when libldap reads the .ldaprc file within applications that are running with extra privileges.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.9% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Openldap · Openldap
through 2.2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1379
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1379
Patch
http://www.debian.org/security/2003/dsa-227
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDKSA-2003:006
www.novell.com
http://www.novell.com/linux/security/advisories/2002_047_openldap2.html
More from Openldap
9.8
CVE-2022-29155
In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query
9.8
CVE-2010-0211
The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a…
7.5
CVE-2023-2953
A vulnerability was found in openldap
7.5
CVE-2020-25710
A flaw was found in OpenLDAP in versions before 2.4.56
7.5
CVE-2020-25709
A flaw was found in OpenLDAP