REDHAT-BUG-680472: Medium severity red hat openldap servers vulnerability
It was reported [1],[2] that OpenLDAP, when using the back-ndb backend (which uses MySQL's NDB cluster engine for the backend storage), would allow successful authentication to the root DN regardless of whether the correct password was provided. In order for this to be successfully exploited, the attacker would need to know the root DN (e.g. cn=root,dc=example,dc=com) to authenticate with.
The back-ndb backend was introduced in OpenLDAP 2.4.12; earlier versions do not have this backend and are thus not vulnerable to this flaw.
References:
[1] http://www.openldap.org/its/index.cgi/Software%20Bugs?id=6661 [2] http://secunia.com/advisories/43331/ [3] http://www.openldap.org/devel/cvsweb.cgi/servers/slapd/back-ndb/bind.cpp.diff?r1=1.5&r2=1.8
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-680472?
The severity of REDHAT-BUG-680472 is considered critical due to the authentication bypass vulnerability.
How do I fix REDHAT-BUG-680472?
To fix REDHAT-BUG-680472, upgrading OpenLDAP to a version later than 2.4.12 that includes the necessary patches is required.
Which versions of OpenLDAP are affected by REDHAT-BUG-680472?
OpenLDAP versions 2.4.12 and earlier that utilize the back-ndb backend are affected by REDHAT-BUG-680472.
What are the implications of REDHAT-BUG-680472?
The implications of REDHAT-BUG-680472 include the potential unauthorized access to the root DN without proper authentication.
Is there a workaround for REDHAT-BUG-680472?
There are no effective workarounds for REDHAT-BUG-680472, and updating OpenLDAP is the recommended mitigation.