Vulnerabilities > CVE-2007-3193 - Unspecified vulnerability in PHPwiki

047910
CVSS 10.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
low complexity
phpwiki
critical
nessus
NVD
Published: 2007-06-12
Updated: 2017-07-29

Summary

lib/WikiUser/LDAP.php in PhpWiki before 1.3.13p1, when the configuration lacks a nonzero PASSWORD_LENGTH_MINIMUM, might allow remote attackers to bypass authentication via an empty password, which causes ldap_bind to return true when used with certain LDAP implementations.

Vulnerable Configurations

Part Description Count
Application
Phpwiki
1

Nessus

  • NASL familyGentoo Local Security Checks
    NASL idGENTOO_GLSA-200709-10.NASL
    descriptionThe remote host is affected by the vulnerability described in GLSA-200709-10 (PhpWiki: Authentication bypass) The PhpWiki development team reported an authentication error within the file lib/WikiUser/LDAP.php when binding to an LDAP server with an empty password. Impact : A remote attacker could provide an empty password when authenticating. Depending on the LDAP implementation used, this could bypass the PhpWiki authentication mechanism and grant the attacker access to the application. Workaround : There is no known workaround at this time.
    last seen2020-06-01
    modified2020-06-02
    plugin id26100
    published2007-09-24
    reporterThis script is Copyright (C) 2007-2019 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/26100
    titleGLSA-200709-10 : PhpWiki: Authentication bypass
  • NASL familyDebian Local Security Checks
    NASL idDEBIAN_DSA-1371.NASL
    descriptionSeveral vulnerabilities have been discovered in phpWiki, a wiki engine written in PHP. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-2024 It was discovered that phpWiki performs insufficient file name validation, which allows unrestricted file uploads. - CVE-2007-2025 It was discovered that phpWiki performs insufficient file name validation, which allows unrestricted file uploads. - CVE-2007-3193 If the configuration lacks a nonzero PASSWORD_LENGTH_MINIMUM, phpWiki might allow remote attackers to bypass authentication via an empty password, which causes ldap_bind to return true when used with certain LDAP implementations.
    last seen2020-06-01
    modified2020-06-02
    plugin id26032
    published2007-09-14
    reporterThis script is Copyright (C) 2007-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/26032
    titleDebian DSA-1371-1 : phpwiki - several vulnerabilities

References