SEPTEMBER 21, 2026
Live Feed
Back to database
Case File

CVE-2002-1347

CRITICAL · CVSS 9.8 EPSS 7.08%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2002-12-18 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.8. It may be remotely exploitable. It may lead to a denial-of-service condition.

CVE
CVE-2002-1347
Severity
CRITICAL
CVSS
9.8
EPSS
7.08%

Original NVD Description

Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long inputs during user name canonicalization, (2) characters that need to be escaped during LDAP authentication using saslauthd, or (3) an off-by-one error in the log writer, which does not allocate space for the null character that terminates a string.