Mandriva Linux Security Advisory 2015-225

Discussion in 'News Aggregator' started by Packet Storm, 5 May 2015.

  1. Packet Storm

    Packet Storm Guest

    Mandriva Linux Security Advisory 2015-225 - The cherokee_validator_ldap_check function in validator_ldap.c in Cherokee 1.2.103 and earlier, when LDAP is used, does not properly consider unauthenticated-bind semantics, which allows remote attackers to bypass authentication via an empty password.

    Continue reading...
     
    #1 Packet Storm, 5 May 2015
(You must log in or sign up to post here.)

Share This Page

Loading...