CVE-2002-0007

CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous bind to the LDAP server via a request that does not include a password, which causes a null password to be sent to the LDAP server.

• http://archives.neohapsis.com/archives/bugtraq/2002-01/0034.htmlPatch, Vendor Advisory
• http://bugzilla.mozilla.org/show_bug.cgi?id=54901Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2002-001.html
• http://www.bugzilla.org/security2_14_1.html
• http://www.securityfocus.com/bid/3792
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7812
• http://archives.neohapsis.com/archives/bugtraq/2002-01/0034.htmlPatch, Vendor Advisory
• http://bugzilla.mozilla.org/show_bug.cgi?id=54901Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2002-001.html
• http://www.bugzilla.org/security2_14_1.html
• http://www.securityfocus.com/bid/3792
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7812

Published

Jan 31, 2002

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2002-0001Vulnerability in RFC822 address parser in mutt before 1.2.5.…
• CVE-2002-0002Format string vulnerability in stunnel before 3.22 when used…
• CVE-2002-0003Buffer overflow in the preprocessor in groff 1.16 and earlie…
• CVE-2002-0004Heap corruption vulnerability in the "at" program allows loc…
• CVE-2002-0005Buffer overflow in AOL Instant Messenger (AIM) 4.7.2480, 4.8…
• CVE-2002-0006XChat 1.8.7 and earlier, including default configurations of…
• CVE-2002-0008Bugzilla before 2.14.1 allows remote attackers to (1) spoof …
• CVE-2002-0009show_bug.cgi in Bugzilla before 2.14.1 allows a user with "B…
• CVE-2002-0010Bugzilla before 2.14.1 allows remote attackers to inject arb…
• CVE-2002-0011Information leak in doeditvotes.cgi in Bugzilla before 2.14.…
• CVE-2002-0012Vulnerabilities in a large number of SNMP implementations al…
• CVE-2002-0013Vulnerabilities in the SNMPv1 request handling of a large nu…