CVE-2002-1508

LowCVSS 1.2/10Last modified Jun 16, 2026

Description

slapd in OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows local users to overwrite arbitrary files via a race condition during the creation of a log file for rejected replication requests.

Metrics

CVSS 2.0 1.2/10AV:L/AC:H/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.debian.org/security/2003/dsa-227Patch, Vendor Advisory
http://www.iss.net/security_center/static/11288.phpVendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2003:006
http://www.novell.com/linux/security/advisories/2002_047_openldap2.html
http://www.redhat.com/support/errata/RHSA-2003-040.htmlPatch, Vendor Advisory
http://www.debian.org/security/2003/dsa-227Patch, Vendor Advisory
http://www.iss.net/security_center/static/11288.phpVendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2003:006
http://www.novell.com/linux/security/advisories/2002_047_openldap2.html
http://www.redhat.com/support/errata/RHSA-2003-040.htmlPatch, Vendor Advisory

Timeline

Published: Feb 19, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-15093.6A patch for shadow-utils 20000902 causes the useradd command to create a mail spool files with read/write privileges of the new user's group CVE-2002-151010.0xdm, with the authComplain variable set to false, allows arbitrary attackers to connect to the X server if the xdm auth directory does not e CVE-2002-15115.0The vncserver wrapper for vnc before 3.3.3r2-21 uses the rand() function instead of srand(), which causes vncserver to generate weak cookies CVE-2002-15126.2xbru in BRU Workstation 17.0 allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the xbru_dsche CVE-2002-15134.6The UCX POP server in HP TCP/IP services for OpenVMS 4.2 through 5.3 allows local users to truncate arbitrary files via the -logfile command CVE-2002-15147.2gds_lock_mgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a "isc_init1.X" temporar CVE-2002-15155.0Directory traversal vulnerability in avatar.php in CoolForum 0.5 beta allows remote attackers to read arbitrary files via .. (dot dot) seque CVE-2002-15164.6rpcbind in SGI IRIX, when using the -w command line switch, allows local users to overwrite arbitrary files via a symlink attack.CVE-2002-15174.6fsr_efs in IRIX 6.5 allows local users to conduct unauthorized file activities via a symlink attack, possibly via the .fsrlast file.CVE-2002-15183.6mv in IRIX 6.5 creates a directory with world-writable permissions while moving a directory, which could allow local users to modify files a CVE-2002-151910.0Format string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, allows remote atta CVE-2002-152010.0The CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, does not properly close the SSH connection when a