REDHAT-BUG-680466
First published: Fri Feb 25 2011(Updated: )
It was reported [1],[2],[3] that in certain configurations, OpenLDAP would authenticate with an invalid password. If an OpenLDAP slave received an authenticated bind request with an invalid password that was forwarded to the master LDAP server, the LDAP slave would return a successful bind (as an anonymous user) rather than return a failure (as the user to authenticate). This is due to a chain overlay being set on the frontend, with a ppolicy configured with ppolicy_forward_updates. While this is not a security issue regarding LDAP contents, due to the authentication as an unprivileged anonymous user, when LDAP returns a successful bind to other external programs (such as programs performing authentication, such as pam_ldap or SSSD) it could allow a user to login with an invalid password (in that case, if LDAP is used for user authentication, it could lead to a successful login with an invalid password). This was already corrected upstream [4] for unrelated reasons. References: [1] <a href="http://www.openldap.org/its/index.cgi/Software%20Bugs?id=6607">http://www.openldap.org/its/index.cgi/Software%20Bugs?id=6607</a> [2] <a href="http://www.openldap.org/lists/openldap-technical/201004/msg00247.html">http://www.openldap.org/lists/openldap-technical/201004/msg00247.html</a> [3] <a href="http://secunia.com/advisories/43331/">http://secunia.com/advisories/43331/</a> [4] <a href="http://www.openldap.org/devel/cvsweb.cgi/servers/slapd/back-ldap/chain.c.diff?r1=1.76&r2=1.77&hideattic=1&sortbydate=0">http://www.openldap.org/devel/cvsweb.cgi/servers/slapd/back-ldap/chain.c.diff?r1=1.76&r2=1.77&hideattic=1&sortbydate=0</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| OpenLDAP |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.openldap.org/its/index.cgi/Software%20Bugs?id=6607
- http://www.openldap.org/lists/openldap-technical/201004/msg00247.html
- http://secunia.com/advisories/43331/
- http://www.openldap.org/devel/cvsweb.cgi/servers/slapd/back-ldap/chain.c.diff?r1=1.76&r2=1.77&hideattic=1&sortbydate=0
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=680483
- https://rhn.redhat.com/errata/RHSA-2011-0346.html
- https://rhn.redhat.com/errata/RHSA-2011-0347.html
- https://bugzilla.redhat.com/show_bug.cgi?id=680466
Frequently Asked Questions
What is the severity of REDHAT-BUG-680466?
The severity of REDHAT-BUG-680466 is considered critical due to the potential for unauthorized access with invalid credentials.
How do I fix REDHAT-BUG-680466?
To fix REDHAT-BUG-680466, ensure that your OpenLDAP configuration is updated to prevent the unauthorized authentication with invalid passwords.
What versions of OpenLDAP are affected by REDHAT-BUG-680466?
REDHAT-BUG-680466 affects certain configurations of OpenLDAP but the specific versions were not detailed; always refer to your vendor's advisories for precise versioning.
Can REDHAT-BUG-680466 lead to data breaches?
Yes, REDHAT-BUG-680466 can lead to data breaches by allowing attackers to authenticate without proper credentials.
Is there a workaround for REDHAT-BUG-680466?
While there may not be a permanent workaround, reviewing and adjusting the authentication configurations could mitigate some risks associated with REDHAT-BUG-680466.
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2011-1024
- agent/severity
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/openldap
- canonical/openldap