Remote Code Execution Vulnerability in phpLDAPadmin 1.2.x
Summary
CVE-2011-4075: The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrary PHP code via the orderby parameter (aka sortby variable) in a query_engine action to cmd.php, as ex... Affects phpldapadmin versions < 1.2.0.5-2.1. Fixed in 1.2.0.5-2.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
phpLDAPadmin is a web-based application used for managing LDAP directories. It provides a user-friendly interface for performing various LDAP operations, such as browsing, editing, and managing directory entries. The application is widely used in environments where LDAP is employed for authentication and directory services. However, versions 1.2.x prior to 1.2.2 are vulnerable to a critical security flaw that allows remote attackers to execute arbitrary PHP code, posing significant risks to the integrity and confidentiality of the system.
Vulnerability Detail
The vulnerability arises from the masort function in lib/functions.php, which fails to properly sanitize the 'orderby' parameter in a query_engine action to cmd.php. This oversight allows attackers to manipulate the input and execute arbitrary PHP code on the server. The exploitation of this vulnerability can lead to unauthorized access, data breaches, and complete system compromise, making it a severe threat to any deployment of phpLDAPadmin that has not been updated.
How To Fix
Minimum fixed version
1.2.0.5-2.1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade phpldapadminTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate upgrading is not feasible, a temporary workaround is to restrict access to the phpLDAPadmin interface by implementing firewall rules or using web server configurations to limit access to trusted IP addresses only. This can help mitigate the risk of exploitation until the software can be updated.
Conclusion
The CVE-2011-4075 vulnerability in phpLDAPadmin poses a significant risk due to its potential for remote code execution. Users are strongly advised to upgrade to the latest version to safeguard their systems. Implementing workarounds can provide temporary relief, but a permanent fix through upgrading is essential for long-term security.
See every vulnerability recorded for phpldapadmin →
FAQ
phpLDAPadmin is a web-based tool for managing LDAP directories, providing an interface for users to perform various LDAP operations.
The vulnerability affects phpLDAPadmin versions 1.2.x prior to 1.2.2.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Not fixing this vulnerability can lead to remote code execution, allowing attackers to gain unauthorized access, manipulate data, or compromise the entire system.
Yes, Vulert can monitor and alert in real-time for open-source vulnerabilities in your software by using a manifest file like package-lock.json.
Related vulnerabilities
Recent vulnerabilities recorded for phpldapadmin.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
