QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2002-0374

Back to search

CVE-2002-0374

Published: Apr 2, 2003

Modified: Aug 8, 2024

PUBLISHED

Description

Format string vulnerability in the logging function for the pam_ldap PAM LDAP module before version 144 allows attackers to execute arbitrary code via format strings in the configuration file name.

VendorProductVersions

n/a

n/a

affected
n/a

References

4679
vdb-entry
x_refsource_BID
RHSA-2002:084
vendor-advisory
x_refsource_REDHAT
RHSA-2002:141
vendor-advisory
x_refsource_REDHAT
RHSA-2002:180
vendor-advisory
x_refsource_REDHAT
20020506 ldap vulnerabilities
mailing-list
x_refsource_VULNWATCH
RHSA-2002:175
vendor-advisory
x_refsource_REDHAT
MDKSA-2002:075
vendor-advisory
x_refsource_MANDRAKE
20021030 GLSA: pam_ldap
mailing-list
x_refsource_BUGTRAQ
pamldap-config-format-string(9018)
vdb-entry
x_refsource_XF

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now