CVE-2002-0007: Critical severity Bugzilla vulnerability
CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous bind to the LDAP server via a request that does not include a password, which causes a null password to be sent to the LDAP server.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0007?
CVE-2002-0007 is classified as a moderate severity vulnerability due to its potential for unauthorized LDAP access.
How do I fix CVE-2002-0007?
To fix CVE-2002-0007, upgrade Bugzilla to version 2.14.1 or later to eliminate the LDAP anonymous bind vulnerability.
What systems are affected by CVE-2002-0007?
CVE-2002-0007 affects Bugzilla versions prior to 2.14.1 that utilize LDAP authentication.
Can CVE-2002-0007 lead to data exposure?
Yes, CVE-2002-0007 can lead to data exposure by allowing attackers to bind to the LDAP server without a password.
Is CVE-2002-0007 a client-side or server-side vulnerability?
CVE-2002-0007 is a server-side vulnerability as it targets the Bugzilla application's interaction with the LDAP server.