PT-2002-2991 · Aldap · Aldap

Published 2002-12-31 · Updated 2017-07-29 · CVE-2002-2279

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: aldap version 0.09

Description: The issue allows remote attackers to authenticate with Manager permissions due to an unspecified vulnerability in the bind function in config.inc.

Recommendations: For aldap version 0.09, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2002-2279

Affected Products

Aldap

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-2279 · Security Note
• http://alcastle.com/index.php?id=6&subject=%2Faldap%2F&view=CHANGE.LOG.txt · Vendor Advisory
• http://securityfocus.com/bid/6310 · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10733 · Note