CVEvulnerability

CVE-2002-1379

7.5 HIGH Published 2003-01-02 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2003-01-02
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows remote or local attackers to execute arbitrary code when libldap reads the .ldaprc file within applications that are running with extra privileges.

Affected configurations

• openldap openldap (<= 2.2.0)

References