Directory Traversal Vulnerability in phpLDAPadmin: Remote File Access Risk
Summary
DEBIAN-CVE-2005-2792: Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitrary files via a .. Affects phpldapadmin versions < 0.9.6c-7. Fixed in 0.9.6c-7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
phpLDAPadmin is a web-based application designed to manage LDAP directories. It provides an intuitive interface for users to interact with LDAP servers, allowing for the management of users, groups, and other directory objects. Despite its functionality, phpLDAPadmin has been identified to have vulnerabilities that can be exploited, particularly a directory traversal issue that allows unauthorized access to sensitive files.
Vulnerability Detail
The vulnerability arises from a directory traversal flaw in the welcome.php file of phpLDAPadmin versions 0.9.6 and 0.9.7. This flaw permits remote attackers to read arbitrary files on the server by manipulating the 'custom_welcome_page' parameter with a '..' (dot dot) sequence. The implications of this vulnerability can be severe, as it may expose sensitive information stored on the server, leading to further exploitation or data breaches.
How To Fix
Minimum fixed version
0.9.6c-7
This is the first release that contains the fix.
sudo apt-get install --only-upgrade phpldapadminTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can restrict access to the welcome.php file or disable the custom welcome page feature until the package is updated. This can be done by modifying the configuration settings in the phpLDAPadmin configuration file.
Conclusion
The directory traversal vulnerability in phpLDAPadmin poses a significant risk to users of versions 0.9.6 and 0.9.7. It is crucial to update to the patched version 0.9.6c-7 to mitigate this risk. Users should also consider using tools like Vulert to monitor for vulnerabilities in their applications.
See every vulnerability recorded for phpldapadmin →
FAQ
A directory traversal vulnerability allows an attacker to access files and directories that are stored outside the web root folder, potentially exposing sensitive information.
If you are using phpLDAPadmin versions 0.9.6 or 0.9.7, your installation is vulnerable to this issue. Check your version by running 'phpLDAPadmin --version' in the terminal.
The primary risk is unauthorized access to sensitive files on the server, which can lead to data breaches and further exploitation of the system.
Yes, you can use Vulert, which monitors and alerts in real-time for open-source vulnerabilities in your software using just a manifest file like package-lock.json. You can check your application for vulnerabilities using the Vulert playground without any signup.
If an immediate update is not possible, consider implementing access restrictions to the vulnerable files and monitoring your server for any suspicious activity.
References
Related vulnerabilities
Recent vulnerabilities recorded for phpldapadmin.
