CVE-2002-1379

high

Description

OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows remote or local attackers to execute arbitrary code when libldap reads the .ldaprc file within applications that are running with extra privileges.

References

http://www.novell.com/linux/security/advisories/2002_047_openldap2.html

http://www.mandriva.com/security/advisories?name=MDKSA-2003:006

http://www.debian.org/security/2003/dsa-227

Details

Source: Mitre, NVD

Published: 2003-01-02

Updated: 2008-09-10

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H