7.5
CVSSv2

CVE-2002-2043

Published: 31/12/2002 Updated: 05/09/2008
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in the LDAP and MySQL authentication patch for Cyrus SASL 1.5.24 and 1.5.27 allows remote malicious users to execute arbitrary SQL commands and log in as arbitrary POP mail users via the password.

Vulnerable Product Search on Vulmon Subscribe to Product

cyrus sasl 1.5.27

cyrus sasl 1.5.24