Unscored CVE-2002-0374 EUVD-2002-0371GHSA-wchj-64g6-mrqx

Format string vulnerability in the logging function for the pam_ldap PAM LDAP module before version 144 allows attackers to execute arbitra…

Published Apr 2, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

Format string vulnerability in the logging function for the pam_ldap PAM LDAP module before version 144 allows attackers to execute arbitrary code via format strings in the configuration file name.

References

4679 vdb-entry
RHSA-2002:084 vendor-advisory
RHSA-2002:141 vendor-advisory
RHSA-2002:180 vendor-advisory
20020506 ldap vulnerabilities mailing-list
RHSA-2002:175 vendor-advisory
MDKSA-2002:075 vendor-advisory
20021030 GLSA: pam_ldap mailing-list
pamldap-config-format-string(9018) vdb-entry