CVE-2003-1434

CVE-2003-1434 describes a vulnerability in pete_werner login_ldap versions 3.1 and 3.2, allowing remote attackers to perform unauthenticated bind requests. This occurs when specific anonymous binding options (bind_anon_dn, bind_anon_cred, or bind_anon) are enabled, permitting binds without a password, DN, or both. With a CVSS score of 6.8, this vulnerability is considered medium severity, as it can be exploited remotely with medium complexity to achieve partial confidentiality, integrity, and availability impacts. While there is no known active exploitation, publicly available exploit code, or Metasploit/Nuclei modules, the vulnerability has garnered significant community discussion with 10 mentions, indicating awareness despite its age.