CVE-2002-0735

Published: Aug 12, 2002Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Format string vulnerability in the logging() function in C-Note Squid LDAP authentication module (squid_auth_LDAP) 2.0.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code by triggering log messages.

Affected (17)

Products: C Note: Squid Auth Ldap · Padl Software: Nss Ldap, Pam Ldap

1 product

2 products

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
C Note Squid Auth Ldap	Version 1.0.1
C Note Squid Auth Ldap	Version 1.0.2_beta
C Note Squid Auth Ldap	Version 1.2_b2
C Note Squid Auth Ldap	Version 2.0
Padl Software Nss Ldap	Version build_180
Padl Software Nss Ldap	Version build_181
Padl Software Nss Ldap	Version build_183
Padl Software Nss Ldap	Version build_184
Padl Software Nss Ldap	Version build_185.1
Padl Software Nss Ldap	Version build_185.2
Padl Software Nss Ldap	Version build_185.3
Padl Software Nss Ldap	Version build_185
Padl Software Nss Ldap	Version build_186
Padl Software Nss Ldap	Version build_187
Padl Software Nss Ldap	Version build_188
Padl Software Nss Ldap	Version build_189
Padl Software Pam Ldap	Version build_143