CVE-2002-0007
CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous...
CVE-2002-0007 is a high vulnerability (CVSS 10.0) in Mozilla Bugzilla, published January 31, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.37%, the 84th percentile. No source names a fixed version.
- Severity
- 10.0 HighCVSS 2.0, NVD
- Exploit chance
- 2.37%EPSS, 84th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous bind to the LDAP server via a request that does not include a password, which causes a null password to be sent to the LDAP server.
Exploit likelihood
Affected products
What each source reports
NVD Score used
CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous bind to the LDAP server via a request that does not include a password, which causes a null password to be sent to the LDAP server.
- Record
CVE-2002-0007- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE ListNo score
CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous bind to the LDAP server via a request that does not include a password, which causes a null password to be sent to the LDAP server.
- Record
CVE-2002-0007- Updated
- 2026-11-02
EUVDEUVD-2002-0007No score
CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous bind to the LDAP server via a request that does not include a password, which causes a null password to be sent to the LDAP server.
- Record
EUVD-2002-0007- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xmjv-5hmh-hg5pNo score
CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous...
CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous bind to the LDAP server via a request that does not include a password, which causes a null password to be sent to the LDAP server.
- Record
GHSA-xmjv-5hmh-hg5p- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
rhn.redhat.com/errata/RHSA-2002-001.html
archives.neohapsis.com/archives/bugtraq/2002-01/0034.html
bugzilla.org/security2_14_1.html
bugzilla.mozilla.org/show_bug.cgi?id=54901
exchange.xforce.ibmcloud.com/vulnerabilities/7812
securityfocus.com/bid/3792
nvd.nist.gov/vuln/detail/CVE-2002-0007
github.com/advisories/GHSA-xmjv-5hmh-hg5p