Unauthorized LDAP Access in phpldapadmin: CVE-2005-2654
Summary
DEBIAN-CVE-2005-2654: phpldapadmin before 0.9.6c allows remote attackers to gain anonymous access to the LDAP server, even when disable_anon_bind is set, via an HTTP request to login.php with the anonymous_bind parameter set. Affects phpldapadmin versions < 0.9.6c-5. Fixed in 0.9.6c-5. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
phpldapadmin is a web-based LDAP client that allows users to manage LDAP directories through a user-friendly interface. It is widely used for administering LDAP servers and provides features such as user management, group management, and schema editing. However, prior to version 0.9.6c, phpldapadmin had a vulnerability that allowed remote attackers to bypass authentication mechanisms, leading to unauthorized access to LDAP servers.
Vulnerability Detail
The vulnerability identified as CVE-2005-2654 affects phpldapadmin versions before 0.9.6c. It allows remote attackers to gain anonymous access to the LDAP server, even when the 'disable_anon_bind' setting is enabled. This is achieved through an HTTP request to the login.php script with the 'anonymous_bind' parameter set, which can lead to unauthorized data exposure and manipulation of the LDAP directory.
How To Fix
Minimum fixed version
0.9.6c-5
This is the first release that contains the fix.
sudo apt-get install --only-upgrade phpldapadminTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can disable anonymous binds in your LDAP server configuration. Ensure that the 'disable_anon_bind' option is set to true in your LDAP server settings to prevent unauthorized access until the package can be updated.
Conclusion
CVE-2005-2654 is a significant vulnerability in phpldapadmin that can lead to unauthorized access to LDAP servers. It is crucial for users to update to the patched version to mitigate risks. Additionally, implementing workarounds and utilizing monitoring tools like Vulert can enhance security.
See every vulnerability recorded for phpldapadmin →
FAQ
CVE-2005-2654 is a vulnerability in phpldapadmin that allows unauthorized access to LDAP servers.
If you are using a version prior to 0.9.6c, your installation is vulnerable to CVE-2005-2654.
The risks include unauthorized access to sensitive LDAP data, which can lead to data breaches and manipulation of directory entries.
Yes, you can use Vulert to monitor your application for open-source vulnerabilities without needing access to the code. Visit https://vulert.com to learn more.
Yes, you can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
References
Related vulnerabilities
Recent vulnerabilities recorded for phpldapadmin.
