Where
-Infinity
0

Trending

Last week
Last month
Last year

Horde Horde LDAPMatthew Daley reported an issue in Horde LDAP where, if a user knew the LDAP bind user's DN, they co…

Risk 19
Severity
4

Matthew Daley reported an issue in Horde LDAP where, if a user knew the LDAP bind user's DN, they could login without supplying a password. This has been fixed in version 2.0.6:

https://github.com/horde/horde/commit/8f719b53b0ee2d4b8a40a770430683c98fb5f2fd https://github.com/horde/horde/commit/4c3e18f1724ab39bfef10c189a5b52036a744d55

It has been fixed in Fedora via bug 1104961, and EPEL 6 via bug 1104962.

Full details available in http://seclists.org/oss-sec/2014/q2/504

First published (updated )
REDHAT-BUG-1109628

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203