CVE-2002-0007
CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous...
CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous bind to the LDAP server via a request that does not include a password, which causes a null password to be sent to the LDAP server.
Exploit likelihood
What each source reports
NVD Score used
CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous bind to the LDAP server via a request that does not include a password, which causes a null password to be sent to the LDAP server.
- Record
CVE-2002-0007- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous bind to the LDAP server via a request that does not include a password, which causes a null password to be sent to the LDAP server.
- Record
CVE-2002-0007- Updated
- 2026-11-02
EUVDEUVD-2002-0007 No score
CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous bind to the LDAP server via a request that does not include a password, which causes a null password to be sent to the LDAP server.
- Record
EUVD-2002-0007- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xmjv-5hmh-hg5p No score
CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous...
CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous bind to the LDAP server via a request that does not include a password, which causes a null password to be sent to the LDAP server.
- Record
GHSA-xmjv-5hmh-hg5p- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2002-0007 is a high vulnerability (CVSS 10.0) in Mozilla Bugzilla, published January 31, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.37%, the 83rd percentile. No source names a fixed version.
References
rhn.redhat.com/errata/RHSA-2002-001.html
archives.neohapsis.com/archives/bugtraq/2002-01/0034.html
bugzilla.org/security2_14_1.html
bugzilla.mozilla.org/show_bug.cgi?id=54901
exchange.xforce.ibmcloud.com/vulnerabilities/7812
securityfocus.com/bid/3792
nvd.nist.gov/vuln/detail/CVE-2002-0007
github.com/advisories/GHSA-xmjv-5hmh-hg5p