GCVE-110-MAGEIA-2015-181

Advisory Published

Vulnetix · Advisory published May 3, 2015

Updated cherokee packages fix security vulnerability: The cherokee_validator_ldap_check function in validator_ldap.c in Cherokee 1.2.103 and earlier, when LDAP is used, does not properly consider unauthenticated-bind semantics, which allows remote attackers to bypass authentication via an empty password (CVE-2014-4668).

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	cherokee	0 (affected), 1.2.103-2.2.mga4 (unaffected)	—

References

Updated cherokee packages fix CVE-2014-4668

advisory

Updated cherokee packages fix CVE-2014-4668

issue

Updated cherokee packages fix CVE-2014-4668

url

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON