DBMail before 2.2.9, when using authldap with an LDAP server that supports anonymous login such as Active Directory, allows remote attackers to bypass authentication via an empty password, which causes the LDAP bind to indicate success based on anonymous authentication.

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2008-85:01 advisory.

    Description of problem:
    Dbmail is the name of a group of programs that enable the possibility of     storing and retrieving mail messages from a database.
    DBMail before 2.2.9, when using authldap with an LDAP server that supports     anonymous login such as Active Directory, allows remote attackers to bypass     authentication via an empty password, which causes the LDAP bind to indicate     success based on anonymous authentication.
    - Updated in SP1

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

- Thu Apr 24 2008 Bernard Johnson <bjohnson at     symetrix.com> - 2.2.9-1

    - v 2.2.9

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix possible authentication bypass in authldap authentication module when dbmail is used with LDAP servers allowing anonymous logins - CVE-2007-6714 (#443019).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-200804-24 (DBmail: Data disclosure)

    A vulnerability in DBMail's authldap module when used in conjunction     with an Active Directory server has been reported by vugluskr. When     passing a zero length password to the module, it tries to bind     anonymously to the LDAP server. If the LDAP server allows anonymous     binds, this bind succeeds and results in a successful authentication to     DBMail.
  Impact :

    By passing an empty password string to the server, an attacker could be     able to log in to any account.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
283957	MiracleLinux 3 : dbmail-2.2.5-1.8AXS3 (AXSA:2008-85:01)	Nessus	Miracle Linux Local Security Checks	critical
32410	Fedora 9 : dbmail-2.2.9-1.fc9 (2008-4245)	Nessus	Fedora Local Security Checks	medium
32099	Fedora 7 : dbmail-2.2.9-1.fc7 (2008-3371)	Nessus	Fedora Local Security Checks	medium
32093	Fedora 8 : dbmail-2.2.9-1.fc8 (2008-3333)	Nessus	Fedora Local Security Checks	medium
32017	GLSA-200804-24 : DBmail: Data disclosure	Nessus	Gentoo Local Security Checks	medium

Detections

Analytics

CVE-2007-6714

critical

Tenable Plugins

critical

medium

medium

medium

medium