Unscored CVE-2002-2043 EUVD-2002-2022GHSA-hfpm-j2f9-7gcc

SQL injection vulnerability in the LDAP and MySQL authentication patch for Cyrus SASL 1.5.24 and 1.5.27 allows remote attackers to execute …

Published Jul 14, 2005 · Updated Sep 17, 2024 · Assigned by mitre

Description

SQL injection vulnerability in the LDAP and MySQL authentication patch for Cyrus SASL 1.5.24 and 1.5.27 allows remote attackers to execute arbitrary SQL commands and log in as arbitrary POP mail users via the password.

References

4409 vdb-entry
cyrus-sasl-patch-pop-access(8748) vdb-entry
20020402 SASL (v1/v2) MYSQL/LDAP authentication patch. mailing-list