PT-2002-1114 · Mozilla · Bugzilla

Publicado 2002-01-31 · Atualizado 2017-10-10 · CVE-2002-0007

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Bugzilla versions prior to 2.14.1

Description The issue allows remote attackers to obtain an anonymous bind to the LDAP server by sending a request without a password, causing a null password to be sent to the LDAP server. This occurs when using LDAP in CGI.pl.

Recommendations For versions prior to 2.14.1, update to version 2.14.1 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2002-0007

Produtos afetados

Bugzilla

Referências · 8

• http://securityfocus.com/bid/3792 · Nota
• http://bugzilla.mozilla.org/show_bug.cgi?id=54901 · Aviso do Fabricante
• http://rhn.redhat.com/errata/RHSA-2002-001.html · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7812 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0007 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2002-01/0034.html · Aviso do Fabricante
• http://bugzilla.org/security2_14_1.html · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0007 · Nota