CVE-2005-2654

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2005-2654

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2005-2654.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2005-2654

Downstream

DEBIAN-CVE-2005-2654

DSA-790-1

Published

2005-08-30T17:03:00Z

Modified

2025-08-09T19:01:28Z

Summary

[none]

Details

phpldapadmin before 0.9.6c allows remote attackers to gain anonymous access to the LDAP server, even when disableanonbind is set, via an HTTP request to login.php with the anonymous_bind parameter set.

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=322423
http://www.debian.org/security/2005/dsa-790
http://www.gentoo.org/security/en/glsa/glsa-200509-04.xml

CVE-2005-2654

Affected packages