DBMail before 2.2.9, when using authldap with an LDAP server that supports anonymous login such as Active Directory, allows remote attackers to bypass authentication via an empty password, which causes the LDAP bind to indicate success based on anonymous authentication.

- Thu Apr 24 2008 Bernard Johnson <bjohnson at     symetrix.com> - 2.2.9-1

    - v 2.2.9

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix possible authentication bypass in authldap authentication module when dbmail is used with LDAP servers allowing anonymous logins - CVE-2007-6714 (#443019).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-200804-24 (DBmail: Data disclosure)

    A vulnerability in DBMail's authldap module when used in conjunction     with an Active Directory server has been reported by vugluskr. When     passing a zero length password to the module, it tries to bind     anonymously to the LDAP server. If the LDAP server allows anonymous     binds, this bind succeeds and results in a successful authentication to     DBMail.
  Impact :

    By passing an empty password string to the server, an attacker could be     able to log in to any account.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
32410	Fedora 9 : dbmail-2.2.9-1.fc9 (2008-4245)	Nessus	Fedora Local Security Checks	medium
32099	Fedora 7 : dbmail-2.2.9-1.fc7 (2008-3371)	Nessus	Fedora Local Security Checks	medium
32093	Fedora 8 : dbmail-2.2.9-1.fc8 (2008-3333)	Nessus	Fedora Local Security Checks	medium
32017	GLSA-200804-24 : DBmail: Data disclosure	Nessus	Gentoo Local Security Checks	medium

Detections

Analytics

CVE-2007-6714

critical

Tenable Plugins

medium

medium

medium

medium