Sympa wwsympa Invalid LDAP Password Remote DoS

medium Nessus Plugin ID 14299

Language:

Synopsis

The remote web server contains a CGI script that is susceptible to a denial of service attack.

Description

According to its version number, the installation of Sympa on the remote host contains a flaw in the processing of LDAP passwords. A successful attack would crash the sympa application.

Solution

Update to version 3.4.4.1 or later.

Plugin Details

Severity: Medium

ID: 14299

File Name: sympa_invalid_ldap_pass.nasl

Version: 1.27

Type: remote

Family: CGI abuses

Published: 8/17/2004

Updated: 4/11/2022

Configuration: Enable paranoid mode, Enable thorough checks

Supported Sensors: Nessus

Vulnerability Information

CPE: cpe:/a:sympa:sympa

Required KB Items: Settings/ParanoidReport

Excluded KB Items: Settings/disable_cgi_scanning

Vulnerability Publication Date: 5/14/2003

Detections

Analytics