CVE-2002-2043

CVE-2002-2043 describes a critical SQL injection vulnerability affecting the LDAP and MySQL authentication patch for Cyrus SASL versions 1.5.24 and 1.5.27. This flaw allows unauthenticated remote attackers to execute arbitrary SQL commands and gain unauthorized access to POP mail accounts by manipulating the password field. With a CVSS score of 7.5, it poses a high risk due to its network-based attack vector, low complexity, and potential for complete compromise of confidentiality, integrity, and availability. Despite its age and severity, there is no evidence of active exploitation, public exploit code, or significant community discussion, suggesting it is not currently a prevalent threat.