What’s Vulnerable › Vulnerabilities

CVE-2002-0735

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2002-08-12 · updated 2026-06-16

Description

Format string vulnerability in the logging() function in C-Note Squid LDAP authentication module (squid_auth_LDAP) 2.0.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code by triggering log messages.

Affected products

• C-Note Squid Auth Ldap: 1.0.1, 1.0.2_beta, 1.2_b2, 2.0
• Padl Software Nss Ldap: build_180, build_181, build_183, build_184, build_185, build_185.1 (+6)
• Padl Software Pam Ldap: build_143

References

• http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0053.html
• http://marc.info/?l=vuln-dev&m=102070267500932&w=2
• http://online.securityfocus.com/archive/1/271173
• http://www.iss.net/security_center/static/9019.php
• http://www.securityfocus.com/bid/4679
• http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0053.html
• http://marc.info/?l=vuln-dev&m=102070267500932&w=2
• http://online.securityfocus.com/archive/1/271173
• http://www.iss.net/security_center/static/9019.php
• http://www.securityfocus.com/bid/4679

Get alerted when CVE-2002-0735 or the next vulnerability affects your stack