CVE-2005-2654: High severity Phpldapadmin Project Phpldapadmin vulnerability
Published Aug 30, 2005
·Updated
phpldapadmin before 0.9.6c allows remote attackers to gain anonymous access to the LDAP server, even when disableanonbind is set, via an HTTP request to login.php with the anonymousbind parameter set.
Affected Software
1 affected component
Phpldapadmin Project Phpldapadmin<0.9.6c
Remediation
Patch Available
Event History
Aug 30, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-2654?
CVE-2005-2654 has a medium severity rating as it allows unauthorized anonymous access to the LDAP server.
2
How do I fix CVE-2005-2654?
To fix CVE-2005-2654, upgrade phpLDAPadmin to version 0.9.6c or later.
3
What systems are affected by CVE-2005-2654?
CVE-2005-2654 affects phpLDAPadmin versions prior to 0.9.6c.
4
What does CVE-2005-2654 enable an attacker to do?
CVE-2005-2654 enables remote attackers to gain unauthorized anonymous access to the LDAP server.
5
Is there a workaround for CVE-2005-2654 if I can't upgrade?
A temporary workaround for CVE-2005-2654 is to disable the anonymous_bind feature in your LDAP server configuration.