Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-6714
HistoryApr 17, 2008 - 12:00 a.m.

CVE-2007-6714

2008-04-1700:00:00
ubuntu.com
ubuntu.com
7

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.023 Low

EPSS

Percentile

89.7%

DBMail before 2.2.9, when using authldap with an LDAP server that supports
anonymous login such as Active Directory, allows remote attackers to bypass
authentication via an empty password, which causes the LDAP bind to
indicate success based on anonymous authentication.

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.023 Low

EPSS

Percentile

89.7%