CVE-2002-2043

2022-10-0316:23:50

mitre

www.cve.org

cve-2002-2043

sql injection

ldap authentication

mysql authentication

cyrus sasl 1.5.24

cyrus sasl 1.5.27

remote attackers

arbitrary sql commands

pop mail users

8.5 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.3%

JSON

SQL injection vulnerability in the LDAP and MySQL authentication patch for Cyrus SASL 1.5.24 and 1.5.27 allows remote attackers to execute arbitrary SQL commands and log in as arbitrary POP mail users via the password.

References

archives.neohapsis.com/archives/bugtraq/2002-04/0020.html

www.iss.net/security_center/static/8748.php

www.securityfocus.com/bid/4409