Vulnerability in Caldera Volution

CVE-2001-1359

Volution clients 1.0.7 and earlier attempt to contact the computer creation daemon (CCD) when an LDAP authentication failure occurs, which allows remote attackers to fully control clients via a Trojan horse Volution server.

EPSS: 0.028 (85.2th percentile) — read the EPSS interpretation.

Affected products

Caldera Volution — versions 1.0, 1.0.6, 1.0.7
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (Vendor Advisory, x_refsource_CALDERA, vendor-advisory)