CVE-2014-3999
First published: Mon Jun 16 2014(Updated: )
Matthew Daley reported an issue in Horde LDAP where, if a user knew the LDAP bind user's DN, they could login without supplying a password. This has been fixed in version 2.0.6: <a href="https://github.com/horde/horde/commit/8f719b53b0ee2d4b8a40a770430683c98fb5f2fd">https://github.com/horde/horde/commit/8f719b53b0ee2d4b8a40a770430683c98fb5f2fd</a> <a href="https://github.com/horde/horde/commit/4c3e18f1724ab39bfef10c189a5b52036a744d55">https://github.com/horde/horde/commit/4c3e18f1724ab39bfef10c189a5b52036a744d55</a> It has been fixed in Fedora via <a class="bz_bug_link bz_status_CLOSED bz_closed bz_public " title="CLOSED ERRATA - stricter checking for bind()'s with empty passwords" href="show_bug.cgi?id=1104961">bug 1104961</a>, and EPEL 6 via <a class="bz_bug_link bz_status_CLOSED bz_closed bz_public " title="CLOSED ERRATA - stricter checking for bind()'s with empty passwords" href="show_bug.cgi?id=1104962">bug 1104962</a>. Full details available in <a href="http://seclists.org/oss-sec/2014/q2/504">http://seclists.org/oss-sec/2014/q2/504</a>
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Horde | <2.0.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/horde/horde/commit/8f719b53b0ee2d4b8a40a770430683c98fb5f2fd
- https://github.com/horde/horde/commit/4c3e18f1724ab39bfef10c189a5b52036a744d55
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1104961
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1104962
- http://seclists.org/oss-sec/2014/q2/504
- https://bugzilla.redhat.com/show_bug.cgi?id=1109628
- http://www.openwall.com/lists/oss-security/2014/06/14/1
- http://www.securityfocus.com/bid/68014
- https://marc.info/?l=horde-announce&m=140178644816474&w=2
Frequently Asked Questions
What is the severity of CVE-2014-3999?
CVE-2014-3999 has been rated as a medium severity vulnerability due to its potential to allow unauthorized access.
How do I fix CVE-2014-3999?
To fix CVE-2014-3999, upgrade to Horde LDAP version 2.0.6 or later.
Who reported CVE-2014-3999?
CVE-2014-3999 was reported by Matthew Daley.
What type of attack does CVE-2014-3999 facilitate?
CVE-2014-3999 facilitates unauthorized access by enabling a user to log in without a password if they know the LDAP bind user's DN.
Which versions of Horde LDAP are affected by CVE-2014-3999?
Horde LDAP versions prior to 2.0.6 are affected by CVE-2014-3999.
- collector/redhat-bugzilla
- alias/CVE-2014-3999
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/description
- agent/event
- agent/type
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/horde
- canonical/horde