CVE-2002-2043

SQL injection vulnerability in the LDAP and MySQL authentication patch for Cyrus SASL 1.5.24 and 1.5.27 allows remote attackers to execute arbitrary SQL commands and log in as arbitrary POP mail users via the password.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:cyrus:sasl:1.5.24:*:*:*:*:*:*:*
cpe:2.3:a:cyrus:sasl:1.5.27:*:*:*:*:*:*:*

History

No history.

Information

Published : 2002-12-31 05:00

Updated : 2024-02-04 16:31


NVD link : CVE-2002-2043

Mitre link : CVE-2002-2043

CVE.ORG link : CVE-2002-2043


JSON object : View

Products Affected

cyrus

  • sasl