CVEvulnerability

CVE-2007-6714

6.8 MEDIUM Published 2008-04-17 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-04-17
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-287

Description

DBMail before 2.2.9, when using authldap with an LDAP server that supports anonymous login such as Active Directory, allows remote attackers to bypass authentication via an empty password, which causes the LDAP bind to indicate success based on anonymous authentication.

Affected configurations

• dbmail dbmail 2.2.6 • dbmail dbmail 2.2.7 • dbmail dbmail 2.2.8

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References