BugZilla LDAP Authentication Bypass Vulnerability
BID:3792
Info
BugZilla LDAP Authentication Bypass Vulnerability
| Bugtraq ID: | 3792 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 09 2001 12:00AM |
| Updated: | Dec 09 2001 12:00AM |
| Credit: | This issue was originally reported to the Bugzilla Development Homepage as Bugzilla Bug 54901. |
| Vulnerable: |
Mozilla Bugzilla 2.14 Mozilla Bugzilla 2.12 Mozilla Bugzilla 2.10 Mozilla Bugzilla 2.8 Mozilla Bugzilla 2.6 Mozilla Bugzilla 2.4 |
| Not Vulnerable: |
Mozilla Bugzilla 2.14.1 |
Discussion
BugZilla LDAP Authentication Bypass Vulnerability
Bugzilla is the bug tracking software package by the Mozilla project. It can be configured to run on Microsoft Windows and various Unix/Linux platforms.
A problem in the Bugzilla's implementation of LDAP makes it possible for an attacker to log in as any user. The attacker must simply leave the password field blank and the authentication challenge will succeed, when it normally should fail. This occurs even when there is a valid password for the account the attacker is attempting to log in under.
This is only an issue if Bugzilla is configured to use LDAP authentication.
Bugzilla is the bug tracking software package by the Mozilla project. It can be configured to run on Microsoft Windows and various Unix/Linux platforms.
A problem in the Bugzilla's implementation of LDAP makes it possible for an attacker to log in as any user. The attacker must simply leave the password field blank and the authentication challenge will succeed, when it normally should fail. This occurs even when there is a valid password for the account the attacker is attempting to log in under.
This is only an issue if Bugzilla is configured to use LDAP authentication.
Exploit / POC
BugZilla LDAP Authentication Bypass Vulnerability
There is no exploit code required.
There is no exploit code required.
Solution / Fix
BugZilla LDAP Authentication Bypass Vulnerability
Solution:
This issue has been addressed by the vendor is versions 2.14.1 and later. Users are advised to upgrade to the most recent version.
It should also be noted that users who are running version 2.15 checked out of
cvs prior to 15 December 2001 are strongly recommended to use 'cvs update' to obtain the current cvs code.
Mozilla Bugzilla 2.10
Mozilla Bugzilla 2.12
Mozilla Bugzilla 2.14
Mozilla Bugzilla 2.4
Mozilla Bugzilla 2.6
Mozilla Bugzilla 2.8
Solution:
This issue has been addressed by the vendor is versions 2.14.1 and later. Users are advised to upgrade to the most recent version.
It should also be noted that users who are running version 2.15 checked out of
cvs prior to 15 December 2001 are strongly recommended to use 'cvs update' to obtain the current cvs code.
Mozilla Bugzilla 2.10
-
Mozilla bugzilla-LATEST.tar.gz
http://ftp.mozilla.org/pub/webtools/bugzilla-LATEST.tar.gz
Mozilla Bugzilla 2.12
-
Mozilla bugzilla-LATEST.tar.gz
http://ftp.mozilla.org/pub/webtools/bugzilla-LATEST.tar.gz
Mozilla Bugzilla 2.14
-
Mozilla bugzilla-LATEST.tar.gz
http://ftp.mozilla.org/pub/webtools/bugzilla-LATEST.tar.gz
Mozilla Bugzilla 2.4
-
Mozilla bugzilla-LATEST.tar.gz
http://ftp.mozilla.org/pub/webtools/bugzilla-LATEST.tar.gz
Mozilla Bugzilla 2.6
-
Mozilla bugzilla-LATEST.tar.gz
http://ftp.mozilla.org/pub/webtools/bugzilla-LATEST.tar.gz
Mozilla Bugzilla 2.8
-
Mozilla bugzilla-LATEST.tar.gz
http://ftp.mozilla.org/pub/webtools/bugzilla-LATEST.tar.gz
References
BugZilla LDAP Authentication Bypass Vulnerability
References:
References: