CVE-2002-0007

published 2002-01-31

CVE-2002-0007: CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous bind to the LDAP server via a request that does not include a…

critical 10 CVSS 3.1

AV N AC L Au N C C I C A C

CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous bind to the LDAP server via a request that does not include a password, which causes a null password to be sent to the LDAP server.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
mozilla	bugzilla	<= 2.14.1	—