Directory Traversal Vulnerability in phpLDAPadmin: Remote File Inclusion Risk
Summary
DEBIAN-CVE-2009-4427: Directory traversal vulnerability in cmd.php in phpLDAPadmin 1.1.0.5 allows remote attackers to include and execute arbitrary local files via a .. Affects phpldapadmin versions < 1.1.0.7-1.1. Fixed in 1.1.0.7-1.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
phpLDAPadmin is a web-based application designed for managing LDAP directories. It provides a user-friendly interface for performing various LDAP operations, such as adding, deleting, and modifying entries. The application is widely used in environments where LDAP is deployed for user authentication and directory services. However, a critical vulnerability has been identified in version 1.1.0.5, which allows attackers to exploit directory traversal flaws, potentially compromising the security of the system.
Vulnerability Detail
The vulnerability arises from a directory traversal flaw in the cmd.php file of phpLDAPadmin version 1.1.0.5. Attackers can manipulate the 'cmd' parameter to include and execute arbitrary local files on the server. This could lead to unauthorized access to sensitive information, execution of malicious scripts, or complete system compromise. The vulnerability is classified as medium urgency, indicating that while it is not the most critical, it poses a significant risk that should be addressed promptly.
How To Fix
Minimum fixed version
1.1.0.7-1.1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade phpldapadminTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can restrict access to the cmd.php file by modifying your web server configuration to deny requests to this file until the software can be updated. For example, in an Apache configuration, you can add the following directive: 'Location /path/to/cmd.php { Deny from all }'.
Conclusion
The directory traversal vulnerability in phpLDAPadmin poses a significant risk to systems using version 1.1.0.5. It is crucial to update to the patched version 1.1.0.7-1.1 to mitigate this risk. In the meantime, applying access restrictions can help protect against potential exploitation.
See every vulnerability recorded for phpldapadmin →
FAQ
The vulnerability is a directory traversal issue that allows remote attackers to include and execute arbitrary local files.
The vulnerability affects phpLDAPadmin version 1.1.0.5. Versions 1.1.0.7-1.1 and later are patched.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
If exploited, this vulnerability could lead to unauthorized access to sensitive data, execution of malicious code, and potentially full system compromise.
If an immediate update is not possible, implement access restrictions to the cmd.php file as a temporary workaround.
References
Related vulnerabilities
Recent vulnerabilities recorded for phpldapadmin.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.