NVD

Id
8012  
Name
CVE-2011-1024  
Description
chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicy_forward_updates (aka authentication-failure forwarding) is used, allows remote authenticated users to bypass external-program authentication by sending an invalid password to a slave server.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:N/AC:H/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-03-19  
Modified Date
2017-01-06  
Seq
2011-1024  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
45626 8012 CVE-2011-1024 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705  View
45627 8012 CVE-2011-1024 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735  View
45628 8012 CVE-2011-1024 [oss-security] 20110224 CVE Request -- OpenLDAP -- two issues  View
45629 8012 CVE-2011-1024 [oss-security] 20110225 Re: CVE Request -- OpenLDAP -- two issues  View
45630 8012 CVE-2011-1024 GLSA-201406-36  View
45631 8012 CVE-2011-1024 1025188  View
45632 8012 CVE-2011-1024 MDVSA-2011:055  View
45633 8012 CVE-2011-1024 MDVSA-2011:056  View
45634 8012 CVE-2011-1024 http://www.openldap.org/devel/cvsweb.cgi/servers/slapd/back-ldap/chain.c.diff?r1=1.76&r2=1.77&hideattic=1&sortbydate=0  View
45635 8012 CVE-2011-1024 http://www.openldap.org/its/index.cgi/Software%20Bugs?id=6607  View
45636 8012 CVE-2011-1024 [openldap-announce] 20110212 OpenLDAP 2.4.24 available  View
45637 8012 CVE-2011-1024 [openldap-technical] 20100429 ppolicy master/slave issue  View
45638 8012 CVE-2011-1024 RHSA-2011:0346  View
45639 8012 CVE-2011-1024 RHSA-2011:0347  View
45640 8012 CVE-2011-1024 USN-1100-1  View
45641 8012 CVE-2011-1024 ADV-2011-0665  View
45642 8012 CVE-2011-1024 https://bugzilla.novell.com/show_bug.cgi?id=674985  View
45643 8012 CVE-2011-1024 https://bugzilla.redhat.com/show_bug.cgi?id=680466  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31140 JVNDB-2011-001379 OpenLDAP の chain.c における内部プログラムの認証を回避される脆弱性 OpenLDAP の back-ldap 内にある chain.c は、chain overlay 機能を伴うマスタースレーブの設定および ppolicy_forward_updates を使用する際、内部プログラムの認証を回避される脆弱性が存在します。 CVE-2011-1024 48931 CVE-2011-1024 8012 4.6 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001379.html 2011-02-10 2011-04-08 View