CVE-2002-0374

CVE-2002-0374 is a format-string vulnerability in the logging function of pam_ldap prior to version 144. The connected sources confirm the issue affects pam_ldap (and related nss_ldap components in certain advisories) and that upgrading pam_ldap to version 144 mitigates the bug. In Red Hat adviso...

CVE-2002-0374

Format string vulnerability in the logging function for the pamldap PAM LDAP module before version 144 allows attackers to execute arbitrary code via format strings in the configuration file name...