What’s Vulnerable › Vulnerabilities

CVE-2002-1347

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 7.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2002-12-18 · updated 2026-06-16
• Weakness: CWE-131

Description

Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long inputs during user name canonicalization, (2) characters that need to be escaped during LDAP authentication using saslauthd, or (3) an off-by-one error in the log writer, which does not allocate space for the null character that terminates a string.

Affected products

• macOS: before 10.3.8 — fixed in 10.3.8
• Apple Mac Os X Server: before 10.3.8 — fixed in 10.3.8
• cyrusimap Cyrus Sasl: through 2.1.9

How to fix

Upgrade to a fixed version: macOS 10.3.8; Apple Mac Os X Server 10.3.8. Check the vendor advisory for mitigations.

References

• http://archives.neohapsis.com/archives/linux/suse/2002-q4/1275.html
• http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000557
• http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html
• http://marc.info/?l=bugtraq&m=103946297703402&w=2
• http://www.debian.org/security/2002/dsa-215
• http://www.redhat.com/support/errata/RHSA-2002-283.html
• http://www.securityfocus.com/advisories/4826
• http://www.securityfocus.com/bid/6347
• http://www.securityfocus.com/bid/6348
• http://www.securityfocus.com/bid/6349
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10810
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10811

Get alerted when CVE-2002-1347 or the next vulnerability affects your stack