CVE-2002-0045: High severity openldap OpenLDAP vulnerability
slapd in OpenLDAP 2.0 through 2.0.19 allows local users, and anonymous users before 2.0.8, to conduct a "replace" action on access controls without any values, which causes OpenLDAP to delete non-mandatory attributes that would otherwise be protected by ACLs.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0045?
CVE-2002-0045 has a high severity rating as it allows unauthorized deletion of protected attributes in OpenLDAP.
How do I fix CVE-2002-0045?
To fix CVE-2002-0045, upgrade OpenLDAP to a version later than 2.0.19.
What versions of OpenLDAP are affected by CVE-2002-0045?
CVE-2002-0045 affects OpenLDAP versions from 2.0 up to and including 2.0.19.
Can anonymous users exploit CVE-2002-0045?
Yes, CVE-2002-0045 allows anonymous users to exploit the vulnerability to manipulate access controls.
What action does CVE-2002-0045 allow unauthorized users to perform?
CVE-2002-0045 allows unauthorized users to conduct a 'replace' action on access controls, leading to the deletion of non-mandatory attributes.