Exploit SurgeLDAP 1.0 - Web Administration Authentication Bypass

[Exploiter]

EDB-ID

24094

Проверка EDB

1. Пройдено

Автор

GSS IT

Тип уязвимости

WEBAPPS

Платформа

CGI

CVE

cve-2004-2254

Дата публикации

2004-05-05

source: https://www.securityfocus.com/bid/10294/info

SurgeLDAP is an LDAP server implementation for Microsoft Windows and various Unix operating systems. It includes a built-in web server to permit remote user access via HTTP. 

It has been reported that the SurgeLDAP web administration application is prone to an authentication bypass vulnerability, possibly allowing remote attackers manager access.

Once administration access is granted, it may be possible for an attacker to modify records in the LDAP database, destroy data, crash the server, or possibly further attacks on other services utilizing SurgeLDAP for it's authentication data.

http://www.example.com/admin.cgi?cmd=show&page=main.tpl&utoken=manager