NVD

Id
80300  
Name
CVE-2002-1347  
Description
Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long inputs during user name canonicalization, (2) characters that need to be escaped during LDAP authentication using saslauthd, or (3) an off-by-one error in the log writer, which does not allocate space for the null character that terminates a string.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2002-12-18  
Modified Date
2017-07-10  
Seq
2002-1347  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
400376 80300 CVE-2002-1347 SuSE-SA:2002:048  View
400377 80300 CVE-2002-1347 557  View
400378 80300 CVE-2002-1347 APPLE-SA-2005-03-21  View
400379 80300 CVE-2002-1347 20021209 Cyrus SASL library buffer overflows  View
400380 80300 CVE-2002-1347 DSA-215  View
400381 80300 CVE-2002-1347 RHSA-2002:283  View
400382 80300 CVE-2002-1347 200212-10  View
400383 80300 CVE-2002-1347 6347  View
400384 80300 CVE-2002-1347 6348  View
400385 80300 CVE-2002-1347 6349  View
400386 80300 CVE-2002-1347 cyrus-sasl-username-bo(10810)  View
400387 80300 CVE-2002-1347 cyrus-sasl-saslauthd-bo(10811)  View
400388 80300 CVE-2002-1347 cyrus-sasl-logwriter-bo(10812)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63982 JVNDB-2002-000309 Cyrus-SASL におけるユーザ名の文字列長検査におけるヒープオーバーフローの脆弱性 Cyrus-SASL には、ユーザ名パラメータの文字列長のチェックを適切に行わない問題のため、ユーザ名に過度に長い文字列を与えられた場合に、ヒープ領域でオーバーフローが発生する脆弱性が存在します。 CVE-2002-1347 5731 CVE-2002-1347 80300 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000309.html 2002-12-09 2007-04-01 View