Lucene search

K
osvGoogleOSV:DSA-790-1
HistoryAug 30, 2005 - 12:00 a.m.

phpldapadmin - programming error

2005-08-3000:00:00
Google
osv.dev
11

EPSS

0.008

Percentile

81.7%

Alexander Gerasiov discovered that phpldapadmin, a web based interface
for administering LDAP servers, allows anybody to access the LDAP
server anonymously, even if this is disabled in the configuration with
the “disable_anon_bind” statement.

The old stable distribution (woody) is not vulnerable to this problem.

For the stable distribution (sarge) this problem has been fixed in
version 0.9.5-3sarge2.

For the unstable distribution (sid) this problem has been fixed in
version 0.9.6c-5.

We recommend that you upgrade your phpldapadmin package.

EPSS

0.008

Percentile

81.7%