CVE-2002-1379

Published: Jan 2, 2003Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows remote or local attackers to execute arbitrary code when libldap reads the .ldaprc file within applications that are running with extra privileges.

Affected (1)

Products: Openldap: Openldap

Openldap

1 product

Openldap

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Openldap Openldap	Up to 2.2.0

References (6)

http://www.debian.org/security/2003/dsa-227

Source: cve@mitre.org

PatchVendor Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2003:006

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2002_047_openldap2.html

Source: cve@mitre.org

http://www.debian.org/security/2003/dsa-227

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2003:006

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2002_047_openldap2.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.