Back to feed
EUVD-2002-2022 · Published Dec 31, 2002
SQL injection vulnerability in the LDAP and MySQL authentication patch for Cyrus SASL 1.5.24 and 1.5.27 allows remote attackers to execute arbitrary SQL commands and log in as arbitrary POP mail users via the password.
Technologies
Cyrus Sasl
Weaknesses
NVD-CWE-Other
CVSS scores
- v2.07.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
