Vulnerabilities > CVE-2002-0007 - Authentication Bypass vulnerability in BugZilla LDAP

047910
CVSS 10.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
low complexity
mozilla
critical
NVD
Published: 2002-01-31
Updated: 2017-10-10

Summary

CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous bind to the LDAP server via a request that does not include a password, which causes a null password to be sent to the LDAP server.

Vulnerable Configurations

Part Description Count
Application
Mozilla
11

Redhat

advisories
rhsa
idRHSA-2002:001

References