CVE-2002-0374 Format string vulnerability in the logging function for the pam_ldap PAM LDAP module before version 144 allows attackers to execute arbitrary code via format strings in the configuration file name.
HighCVSS 7.5
EPSS 3.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in the logging function for the pam_ldap PAM LDAP module before version 144 allows attackers to execute arbitrary code via format strings in the configuration file name.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| padl software pam ldap | <= 144 | No fix listed |
References
- 20020506 ldap vulnerabilities mailing-list vendor-advisory
- 20021030 GLSA: pam_ldap mailing-list
- pamldap-config-format-string(9018) vdb-entry
- MDKSA-2002:075 vendor-advisory
- RHSA-2002:084 vendor-advisory
- RHSA-2002:141 vendor-advisory
- RHSA-2002:175 vendor-advisory
- RHSA-2002:180 vendor-advisory
- 4679 vdb-entry