CVE-2001-1359 Volution clients 1.0.7 and earlier attempt to contact the computer creation daemon (CCD) when an LDAP authentication failure occurs, which allows remote attackers to fully control clients via a Trojan...
HighCVSS 10.0
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Volution clients 1.0.7 and earlier attempt to contact the computer creation daemon (CCD) when an LDAP authentication failure occurs, which allows remote attackers to fully control clients via a Trojan horse Volution server.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| caldera volution | = 1.0 | No fix listed |
| caldera volution | = 1.0.6 | No fix listed |
| caldera volution | = 1.0.7 | No fix listed |
References
- CSSA-2001-021.0 vendor-advisory
- 2850 patch vdb-entry vendor-advisory
- volution-authentication-failure-access(6672) vdb-entry