Critical Remote Code Execution Vulnerability in phpLDAPadmin
Summary
DEBIAN-CVE-2011-4075: The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrary PHP code via the orderby parameter (aka sortby variable) in a query_engine action to cmd.php, as ex... Affects phpldapadmin versions < 1.2.0.5-2.1. Fixed in 1.2.0.5-2.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
phpLDAPadmin is a web-based application used for managing LDAP directories. It provides a user-friendly interface to perform various operations on LDAP entries, making it easier for administrators to manage directory services. However, certain versions of phpLDAPadmin are vulnerable to a critical security flaw that allows remote attackers to execute arbitrary PHP code, potentially compromising the entire system.
Vulnerability Detail
The vulnerability arises from the masort function in lib/functions.php in phpLDAPadmin versions 1.2.x prior to 1.2.2. It allows remote attackers to execute arbitrary PHP code via the orderby parameter (also known as the sortby variable) in a query_engine action to cmd.php. This flaw was actively exploited in the wild in October 2011, posing significant risks to systems running affected versions of the software.
How To Fix
Minimum fixed version
1.2.0.5-2.1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade phpldapadminTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, you can disable the affected functionality by restricting access to the cmd.php file or by validating and sanitizing the input parameters to prevent unauthorized code execution. However, the best practice is to apply the patch as soon as possible.
Conclusion
The phpLDAPadmin vulnerability (CVE-2011-4075) poses a significant risk to systems using affected versions of the software. It is essential to update to the patched version to mitigate potential threats. Regular monitoring and proactive vulnerability management are crucial for maintaining system security.
See every vulnerability recorded for phpldapadmin →
FAQ
phpLDAPadmin is a web-based tool for managing LDAP directories, providing an interface for users to perform various directory operations.
The vulnerability allows attackers to execute arbitrary PHP code on the server, which can lead to full system compromise.
You can check your version of phpLDAPadmin by accessing the application and looking for version information in the interface or by checking the installed package version on your server.
Yes, you can use Vulert, which monitors and alerts in real-time for open-source vulnerabilities using just a manifest file like package-lock.json.
If immediate updates are not possible, consider implementing input validation and restricting access to vulnerable scripts as a temporary workaround.
References
Related vulnerabilities
Recent vulnerabilities recorded for phpldapadmin.
