CVE-2002-1378 Memory corruption in n/a
Remote attackers can execute arbitrary code via buffer overflows in OpenLDAP components like slurpd and slapd.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2002-1378?
CVE-2002-1378 is a high-severity memory corruption vulnerability in Openldap Openldap, published on 17 Dec 2002. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Multiple buffer overflows in OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allow remote attackers to execute arbitrary code via (1) long -t or -r parameters to slurpd, (2) a malicious ldapfilter.conf file that is not properly handled by getfilter functions, (3) a malicious ldaptemplates.conf that causes an overflow in libldap, (4) a certain access control list that causes an overflow in slapd, or (5) a long generated filename for logging rejected replication requests.
Which versions are affected by CVE-2002-1378?
It affects 1 product.
Products include Openldap Openldap.
How do I fix CVE-2002-1378?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2002-1378 being exploited?
There is no known exploitation of CVE-2002-1378 in the wild and no public exploit code.
Other vulnerabilities in Openldap Openldap
Sources
Also known as GHSA-7776-85fj-fv28.