GitHub Advisoryadvisory · Go
GHSA-4g76-w3xw-2x6w Full authentication bypass if SASL authorization username is specified
CRITICAL
Official page ↗
- Aliases
- CVE-2023-27582
- Ecosystem
- Go
- Packages
- github.com/foxcpp/maddy
- Severity
- Critical
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- Weaknesses
- CWE-287
- Reviewed
- 2023-03-14
Affected packages
• Go github.com/foxcpp/maddy: >= 0.2.0, < 0.6.3 → fixed in 0.6.3
Description
Impact
maddy 0.2.0 - 0.6.2 allows a full authentication bypass if SASL authorization username is specified when using the PLAIN authentication mechanisms. Instead of validating the specified authorization username, it is accepted as is after checking the credentials for the authentication username.
Patches
maddy 0.6.3 includes the fix for the bug.
Workarounds
There is no way to fix the issue without upgrading.
References
• Commit that introduced the vulnerable code: https://github.com/foxcpp/maddy/commit/55a91a37b71210f34f98f4d327c30308fe24399a
• Fix: https://github.com/foxcpp/maddy/commit/9f58cb64b39cdc01928ec463bdb198c4c2313a9c
Related
Alias · CVE (1)
- CVE-2023-27582 maddy is a composable, all-in-one mail server. vulnerability
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- https://github.com/foxcpp/maddy/security/advisories/GHSA-4g76-w3xw-2x6w web
- https://nvd.nist.gov/vuln/detail/CVE-2023-27582 advisory
- https://github.com/foxcpp/maddy/commit/55a91a37b71210f34f98f4d327c30308fe24399a web
- https://github.com/foxcpp/maddy/commit/9f58cb64b39cdc01928ec463bdb198c4c2313a9c web
- https://github.com/foxcpp/maddy package
- https://github.com/foxcpp/maddy/releases/tag/v0.6.3 web