CVE-2002-2043 | BDVDB-2026-11533 Detail

Description#

SQL injection vulnerability in the LDAP and MySQL authentication patch for Cyrus SASL 1.5.24 and 1.5.27 allows remote attackers to execute arbitrary SQL commands and log in as arbitrary POP mail users via the password.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/4409
http://www.iss.net/security_center/static/8748.php
http://archives.neohapsis.com/archives/bugtraq/2002-04/0020.html

Exploit#

No public exploit known

History#

Version 12005-07-14Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.