Teiid LDAP Authentication Security Bypass Vulnerability
BID:44224
Info
Teiid LDAP Authentication Security Bypass Vulnerability
| Bugtraq ID: | 44224 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Apr 07 2009 12:00AM |
| Updated: | Apr 07 2009 12:00AM |
| Credit: | Reported by a Teiid Customer |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Teiid LDAP Authentication Security Bypass Vulnerability
Teiid is prone to a security-bypass vulnerability.
To successfully exploit this issue, the LDAP server must allow anonymous binds.
Local attackers can exploit this issue to bypass certain security restrictions and gain unauthorized access.
Teiid 6.0.0 is vulnerable; other versions may also be affected.
Teiid is prone to a security-bypass vulnerability.
To successfully exploit this issue, the LDAP server must allow anonymous binds.
Local attackers can exploit this issue to bypass certain security restrictions and gain unauthorized access.
Teiid 6.0.0 is vulnerable; other versions may also be affected.
Exploit / POC
Teiid LDAP Authentication Security Bypass Vulnerability
An attacker can exploit this issue by using readily available network utilities.
An attacker can exploit this issue by using readily available network utilities.
Solution / Fix
Teiid LDAP Authentication Security Bypass Vulnerability
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
Teiid LDAP Authentication Security Bypass Vulnerability
References:
References: