CVE-2007-6714

DBMail before 2.2.9, when using authldap with an LDAP server that supports anonymous login such as Active Directory, allows remote attackers to bypass…

published April 17, 2008

CVSS
—
EPSS
2%
Percentile
83.8
In the wild
Unconfirmed
What it is

DBMail before 2.2.9, when using authldap with an LDAP server that supports anonymous login such as Active Directory, allows remote attackers to bypass authentication via an empty password, which causes the LDAP bind to indicate success based on anonymous authentication.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02389 · 83.8th percentile
Published
2008-04-17T22:00Z
EPSS history
Timeline
  • 17 APR 22:00Z
    DBMail before 2.2.9, when using authldap with an LDAP server that supports anonymous login such as Active Directory, allows remote attackers to bypass…
    cvelistv5