Lucene search
Ubuntu.comUB:CVE-2014-8088HistoryOct 22, 2014 - 12:00 a.m.
CVE-2014-8088
2014-10-2200:00:00
ubuntu.com
ubuntu.com
18
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
EPSS
0.006
Percentile
78.9%
The (1) Zend_Ldap class in Zend before 1.12.9 and (2) Zend\Ldap component
in Zend 2.x before 2.2.8 and 2.3.x before 2.3.3 allows remote attackers to
bypass authentication via a password starting with a null byte, which
triggers an unauthenticated bind.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 16.04 | noarch | zend-framework | < any | UNKNOWN |
Related
osv
osv
Zend Access Restriction Bypass
2022-05-17 00:28:35
zendframework - regression update
2015-05-20 00:00:00
zendframework - security update
2015-05-20 00:00:00
friendsofphp
friendsofphp
Anonymous authentication in ldap_bind() function of PHP, using null byte
2014-09-16 22:00:00
Anonymous authentication in ldap_bind() function of PHP, using null byte
2014-09-16 22:00:00
Anonymous authentication in ldap_bind() function of PHP, using null byte
2014-09-16 22:00:00
cvelist
cvelist
CVE-2014-8088
2014-10-22 14:00:00
nvd
nvd
CVE-2014-8088
2014-10-22 14:55:07
github
github
Zend Access Restriction Bypass
2022-05-17 00:28:35
cve
cve
CVE-2014-8088
2014-10-22 14:55:07
nessus
nessus
Mandriva Linux Security Advisory : php-ZendFramework (MDVSA-2014:216)
2014-11-21 00:00:00
Fedora 20 : php-ZendFramework-1.12.9-1.fc20 (2014-12418)
2014-10-20 00:00:00
Fedora 20 : php-ZendFramework2-2.3.3-2.fc20 (2014-13302)
2014-10-29 00:00:00
prion
prion
Authentication flaw
2014-10-22 14:55:00
securityvulns
securityvulns
[ MDVSA-2014:216 ] php-ZendFramework
2014-12-01 00:00:00
[ MDVSA-2015:097 ] php-ZendFramework
2015-05-12 00:00:00
[SECURITY] [DSA 3265-1] zendframework security update
2015-06-08 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: php-ZendFramework2-2.2.8-2.fc19
2014-11-10 06:49:24
[SECURITY] Fedora 19 Update: php-ZendFramework-1.12.9-1.fc19
2014-10-17 08:37:23
[SECURITY] Fedora 21 Update: php-ZendFramework2-2.3.3-1.fc21
2014-10-16 02:00:15
mageia
mageia
Updated php-ZendFramework packages fix security vulnerabilities
2014-10-29 14:30:40
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0434)
2022-01-28 00:00:00
Fedora Update for php-ZendFramework2 FEDORA-2014-14043
2014-11-11 00:00:00
Amazon Linux: Security Advisory (ALAS-2014-460)
2015-09-08 00:00:00
amazon
amazon
Medium: php-ZendFramework
2014-12-11 14:23:00
debian
debian
[SECURITY] [DSA 3265-1] zendframework security update
2015-05-20 09:37:25
[SECURITY] [DSA 3265-2] zendframework regression update
2015-05-24 11:55:24
[SECURITY] [DLA 251-2] zendframework regression update
2015-06-23 20:26:59
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
EPSS
0.006
Percentile
78.9%
Related for UB:CVE-2014-8088