CVE

Id
4766  
CVE No.
CVE-2002-0374  
Status
Entry  
Description
Format string vulnerability in the logging function for the pam_ldap PAM LDAP module before version 144 allows attackers to execute arbitrary code via format strings in the configuration file name.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
23978 4766 CVE-2002-0374 BUGTRAQ:20020506 ldap vulnerabilities  View
23979 4766 CVE-2002-0374 VULNWATCH:20020506 ldap vulnerabilities  View
23980 4766 CVE-2002-0374 URL:http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0053.html  View
23981 4766 CVE-2002-0374 CALDERA:CSSA-2002-041.0  View
23982 4766 CVE-2002-0374 URL:ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-041.0.txt  View
23983 4766 CVE-2002-0374 MANDRAKE:MDKSA-2002:075  View
23984 4766 CVE-2002-0374 URL:http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:075  View
23985 4766 CVE-2002-0374 REDHAT:RHSA-2002:084  View
23986 4766 CVE-2002-0374 URL:http://www.redhat.com/support/errata/RHSA-2002-084.html  View
23987 4766 CVE-2002-0374 REDHAT:RHSA-2002:141  View
23988 4766 CVE-2002-0374 URL:http://www.redhat.com/support/errata/RHSA-2002-141.html  View
23989 4766 CVE-2002-0374 REDHAT:RHSA-2002:175  View
23990 4766 CVE-2002-0374 URL:http://www.redhat.com/support/errata/RHSA-2002-175.html  View
23991 4766 CVE-2002-0374 REDHAT:RHSA-2002:180  View
23992 4766 CVE-2002-0374 URL:http://www.redhat.com/support/errata/RHSA-2002-180.html  View
23993 4766 CVE-2002-0374 BUGTRAQ:20021030 GLSA: pam_ldap  View
23994 4766 CVE-2002-0374 URL:http://marc.info/?l=bugtraq&m=103601912505261&w=2  View
23995 4766 CVE-2002-0374 XF:pamldap-config-format-string(9018)  View
23996 4766 CVE-2002-0374 URL:http://www.iss.net/security_center/static/9018.php  View
23997 4766 CVE-2002-0374 BID:4679  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63792 JVNDB-2002-000119 Red Hat Linux の pam_ldap モジュールにおけるフォーマットストリングの脆弱性 Red Hat Linux の pam_ldap モジュールにおいて、pam_ldap モジュールの設定ファイル名に悪意ある文字列を組み込まれた場合に、syslog () 関数の扱いの不備により、フォーマットストリングが発生する脆弱性が存在します。 CVE-2002-0374 4766 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000119.html  View