CVE-2002-1378

Published Jan 2, 2003 openldap

Overview

CVE-2002-1378 is a known-severity vulnerability affecting openldap openldap. It was published on January 2, 2003.

Technical Description

Multiple buffer overflows in OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allow remote attackers to execute arbitrary code via (1) long -t or -r parameters to slurpd, (2) a malicious ldapfilter.conf file that is not properly handled by getfilter functions, (3) a malicious ldaptemplates.conf that causes an overflow in libldap, (4) a certain access control list that causes an overflow in slapd, or (5) a long generated filename for logging rejected replication requests.

Remediation

Check the references section for vendor advisories and patches from openldap. Update openldap to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

Vendor	Product	Versions	Status
openldap	openldap	0	Affected

References

Ref distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000556 Ref www.ciac.org/ciac/bulletins/n-043.shtml Ref www.debian.org/security/2003/dsa-227 Ref www.linuxsecurity.com/advisories/gentoo_advisory-2704.html Ref www.mandriva.com/security/advisories?name=MDKSA-2003:006 Ref www.novell.com/linux/security/advisories/2002_047_openldap2.html Ref www.redhat.com/support/errata/RHSA-2003-040.html Ref www.securityfocus.com/advisories/4827 Ref www.securityfocus.com/bid/6328 Ref www.turbolinux.com/security/TLSA-2003-5.txt

Frequently Asked Questions

What is CVE-2002-1378?

CVE-2002-1378 is a known-severity vulnerability affecting openldap openldap. It was published on January 2, 2003.

How severe is CVE-2002-1378?

CVSS score information is not yet available for this vulnerability. Check back as the CVE record is updated by NVD analysts.

How do I fix or remediate CVE-2002-1378?

How can CyberStrike help with CVE-2002-1378?

CyberStrike's AI-powered security agents can automatically detect CVE-2002-1378 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.