phpldapadmin before 0.9.6c allows remote attackers to gain anonymous access to the LDAP server, even when disable_anon_bind is set, via an HTTP request to login.php with the anonymous_bind parameter set.

The remote host is affected by the vulnerability described in GLSA-200509-04 (phpLDAPadmin: Authentication bypass)

    Alexander Gerasiov discovered a flaw in login.php preventing the     application from validating whether anonymous bind has been disabled in     the target LDAP server configuration.
  Impact :

    Anonymous users can access the LDAP server, even if the     'disable_anon_bind' parameter was explicitly set to avoid this.
  Workaround :

    There is no known workaround at this time.

Alexander Gerasiov discovered that phpldapadmin, a web-based interface for administering LDAP servers, allows anybody to access the LDAP server anonymously, even if this is disabled in the configuration with the 'disable_anon_bind' statement.

The old stable distribution (woody) is not vulnerable to this problem.

The remote host is running phpLDAPadmin, a PHP-based LDAP browser. 

The version of phpLDAPadmin installed on the remote host may allow access to an LDAP server anonymously, even if anonymous binds have been disabled in the application's configuration.

The remote host is running phpLDAPadmin, a PHP-based LDAP browser. The version of phpLDAPadmin installed on the remote host may allow access to an LDAP server anonymously, even if anonymous binds have been disabled in the application's configuration.  

ID	Name	Product	Family	Severity
19669	GLSA-200509-04 : phpLDAPadmin: Authentication bypass	Nessus	Gentoo Local Security Checks	high
19560	Debian DSA-790-1 : phpldapadmin - programming error	Nessus	Debian Local Security Checks	high
19546	phpLDAPadmin Anonymous Bind Security Bypass Vulnerability	Nessus	CGI abuses	medium
3195	phpLDAPadmin < 0.9.6c Anonymous Bind Security Bypass	Nessus Network Monitor	CGI	low

Detections

Analytics

CVE-2005-2654

critical

Tenable Plugins

high

high

medium

low