Lucene search
MitreCVE-2002-0007HistoryJun 25, 2002 - 4:00 a.m.
CVE-2002-0007
2002-06-2504:00:00
mitre
web.nvd.nist.gov
26
bugzilla
ldap
cgi.pl
cve-2002-0007
anonymous bind
security vulnerability
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.1
Confidence
Low
EPSS
0.011
Percentile
84.5%
CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous bind to the LDAP server via a request that does not include a password, which causes a null password to be sent to the LDAP server.
Affected configurations
Node
mozillabugzillaRange≤2.14.1
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.1
Confidence
Low
EPSS
0.011
Percentile
84.5%
Related for CVE-2002-0007