CVE-2002-1378

CVE-2002-1378 describes multiple buffer overflow vulnerabilities in OpenLDAP 2.2.0 and earlier versions. These flaws allow remote attackers to execute arbitrary code through various vectors, including malformed parameters to slurpd, specially crafted configuration files (ldapfilter.conf, ldaptemplates.conf), an oversized access control list, or a long generated filename for logging replication requests. With a CVSS score of 7.5, this vulnerability is considered high severity, indicating a network-based attack with low complexity and potential for partial compromise of confidentiality, integrity, and availability. The EPSS score is low, suggesting a minimal likelihood of exploitation in the wild. Currently, there is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are also extremely low, indicating a lack of widespread attention or exploitation.