CVE-2003-1434

The CVE concerns login_ldap 3.1 and 3.2, where remote attackers can initiate unauthenticated binds if (a) bind_anon_dn is on (bind with no password), (b) bind_anon_cred is on (bind with no DN), or (c) bind_anon is on (bind with no DN or password). Root cause is misconfiguration allowing unauthent...

CVE-2003-1434

loginldap 3.1 and 3.2 allows remote attackers to initiate unauthenticated bind requests if 1 bindanondn is on, which allows a bind with no password provided, 2 bindanoncred is on, which allows a bind with no DN, or 3 bindanon is on, which allows a bind with no DN or password...