CVE-2002-0735

Format string vulnerability in the logging() function in C-Note Squid LDAP authentication module (squid_auth_LDAP) 2.0.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code by triggering log messages.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.iss.net/security_center/static/9019.php	Vendor Advisory
http://www.securityfocus.com/bid/4679	Vendor Advisory
http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0053.html
http://online.securityfocus.com/archive/1/271173
http://marc.info/?l=vuln-dev&m=102070267500932&w=2

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:padl_software:nss_ldap:build_184:::::::*
	cpe:2.3:a:padl_software:nss_ldap:build_185:::::::*
	cpe:2.3:a:padl_software:nss_ldap:build_189:::::::*
	cpe:2.3:a:padl_software:pam_ldap:build_143:::::::*
	cpe:2.3:a:padl_software:nss_ldap:build_181:::::::*
	cpe:2.3:a:padl_software:nss_ldap:build_183:::::::*
	cpe:2.3:a:padl_software:nss_ldap:build_187:::::::*
	cpe:2.3:a:padl_software:nss_ldap:build_188:::::::*
	cpe:2.3:a:c-note:squid_auth_ldap:1.2_b2:::::::*
	cpe:2.3:a:c-note:squid_auth_ldap:2.0:::::::*
	cpe:2.3:a:padl_software:nss_ldap:build_180:::::::*
	cpe:2.3:a:padl_software:nss_ldap:build_185.1:::::::*
	cpe:2.3:a:padl_software:nss_ldap:build_185.2:::::::*
	cpe:2.3:a:padl_software:nss_ldap:build_186:::::::*
	cpe:2.3:a:c-note:squid_auth_ldap:1.0.1:::::::*
	cpe:2.3:a:c-note:squid_auth_ldap:1.0.2_beta:::::::*
	cpe:2.3:a:padl_software:nss_ldap:build_185.3:::::::*

Information

Published : 2002-08-11 21:00

Updated : 2016-10-17 19:21

NVD link : CVE-2002-0735

Mitre link : CVE-2002-0735

JSON object : View

CWE

NVD-CWE-Other

Advertisement

Products Affected

c-note

squid_auth_ldap

padl_software

pam_ldap
nss_ldap

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.iss.net/security_center/static/9019.php", "name": "squidauthldap-logging-format-string(9019)", "tags": ["Vendor Advisory"], "refsource": "XF"}, {"url": "http://www.securityfocus.com/bid/4679", "name": "4679", "tags": ["Vendor Advisory"], "refsource": "BID"}, {"url": "http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0053.html", "name": "20020506 [VulnWatch] ldap vulnerabilities", "tags": [], "refsource": "VULNWATCH"}, {"url": "http://online.securityfocus.com/archive/1/271173", "name": "20020506 ldap vulnerabilities", "tags": [], "refsource": "BUGTRAQ"}, {"url": "http://marc.info/?l=vuln-dev&m=102070267500932&w=2", "name": "20020506 ldap vulnerabilities", "tags": [], "refsource": "VULN-DEV"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Format string vulnerability in the logging() function in C-Note Squid LDAP authentication module (squid_auth_LDAP) 2.0.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code by triggering log messages."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2002-0735", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "HIGH", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}}, "publishedDate": "2002-08-12T04:00Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:padl_software:nss_ldap:build_184:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:padl_software:nss_ldap:build_185:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:padl_software:nss_ldap:build_189:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:padl_software:pam_ldap:build_143:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:padl_software:nss_ldap:build_181:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:padl_software:nss_ldap:build_183:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:padl_software:nss_ldap:build_187:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:padl_software:nss_ldap:build_188:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:c-note:squid_auth_ldap:1.2_b2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:c-note:squid_auth_ldap:2.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:padl_software:nss_ldap:build_180:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:padl_software:nss_ldap:build_185.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:padl_software:nss_ldap:build_185.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:padl_software:nss_ldap:build_186:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:c-note:squid_auth_ldap:1.0.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:c-note:squid_auth_ldap:1.0.2_beta:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:padl_software:nss_ldap:build_185.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2016-10-18T02:21Z"}