Unscored CVE-2001-1359 EUVD-2001-1340GHSA-rw42-j6r8-j8rw

Volution clients 1.0.7 and earlier attempt to contact the computer creation daemon (CCD) when an LDAP authentication failure occurs, which …

Published Apr 2, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

Volution clients 1.0.7 and earlier attempt to contact the computer creation daemon (CCD) when an LDAP authentication failure occurs, which allows remote attackers to fully control clients via a Trojan horse Volution server.

References

volution-authentication-failure-access(6672) vdb-entry
2850 vdb-entry
CSSA-2001-021.0 vendor-advisory