Back to search
CVE-2004-2254
Published: Jul 17, 2005
Modified: Aug 8, 2024
PUBLISHED
Description
SurgeLDAP 1.0g (Build 12), and possibly other versions before 1.0h, allows remote attackers to bypass authentication for the administration interface via a direct request to admin.cgi with a modified utoken parameter.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
1010113
vdb-entry
x_refsource_SECTRACK
surgeldap-admin-auth-bypass(16076)
vdb-entry
x_refsource_XF
1010068
vdb-entry
x_refsource_SECTRACK
http://netwinsite.com/surgeldap/updates.htm
x_refsource_CONFIRM
11549
third-party-advisory
x_refsource_SECUNIA
10294
vdb-entry
x_refsource_BID
5890
vdb-entry
x_refsource_OSVDB
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now