CVE-2002-0045

CVE-2002-0045 describes a vulnerability in OpenLDAP versions 2.0 through 2.0.19, affecting products like OpenLDAP on Linux and Red Hat Linux. This flaw allows local users, and anonymous users in earlier versions, to bypass access controls by performing a "replace" action without values, leading to the deletion of non-mandatory attributes that should be protected by ACLs. With a CVSS score of 7.5 (HIGH), this vulnerability is easily exploitable over the network with low attack complexity and no authentication required, potentially leading to partial compromise of confidentiality, integrity, and availability. While there is no known active exploitation, public exploit code, or Metasploit/Nuclei modules, the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.