CVE-2014-3999: High severity Horde Horde Ldap Horde vulnerability
Matthew Daley reported an issue in Horde LDAP where, if a user knew the LDAP bind user's DN, they could login without supplying a password. This has been fixed in version 2.0.6:
https://github.com/horde/horde/commit/8f719b53b0ee2d4b8a40a770430683c98fb5f2fd https://github.com/horde/horde/commit/4c3e18f1724ab39bfef10c189a5b52036a744d55
It has been fixed in Fedora via bug 1104961, and EPEL 6 via bug 1104962.
Full details available in http://seclists.org/oss-sec/2014/q2/504
Other sources
The HordeLdap library before 2.0.6 for Horde allows remote attackers to bypass authentication by leveraging knowledge of the LDAP bind user DN.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3999?
CVE-2014-3999 has been rated as a medium severity vulnerability due to its potential to allow unauthorized access.
How do I fix CVE-2014-3999?
To fix CVE-2014-3999, upgrade to Horde LDAP version 2.0.6 or later.
Who reported CVE-2014-3999?
CVE-2014-3999 was reported by Matthew Daley.
What type of attack does CVE-2014-3999 facilitate?
CVE-2014-3999 facilitates unauthorized access by enabling a user to log in without a password if they know the LDAP bind user's DN.
Which versions of Horde LDAP are affected by CVE-2014-3999?
Horde LDAP versions prior to 2.0.6 are affected by CVE-2014-3999.