Vulnerability Details : CVE-2002-1379
OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows remote or local attackers to execute arbitrary code when libldap reads the .ldaprc file within applications that are running with extra privileges.
Vulnerability category: Execute code
Products affected by CVE-2002-1379
- cpe:2.3:a:openldap:openldap:*:*:*:*:*:*:*:*
Threat overview for CVE-2002-1379
Top countries where our scanners detected CVE-2002-1379
Top open port discovered on systems with this issue
389
IPs affected by CVE-2002-1379 832
Threat actors abusing to this issue?
Yes
Find out if you* are
affected by CVE-2002-1379!
*Directly or indirectly through your vendors, service providers and 3rd parties.
Powered by
attack surface intelligence
from SecurityScorecard.
Exploit prediction scoring system (EPSS) score for CVE-2002-1379
1.23%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 77 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2002-1379
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
References for CVE-2002-1379
-
http://www.novell.com/linux/security/advisories/2002_047_openldap2.html
404 Page Not Found | SUSE
-
http://www.mandriva.com/security/advisories?name=MDKSA-2003:006
Advisories | Mandriva
-
http://www.debian.org/security/2003/dsa-227
Debian -- The Universal Operating SystemPatch;Vendor Advisory
Jump to