Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

phpwiki: authentication bypass

Package(s):

phpwiki

CVE #(s):

CVE-2007-3193

Created:

September 19, 2007

Updated:

September 19, 2007

Description:

Versions of phpwiki prior to 1.3.14 suffer from an authentication bypass vulnerability when using an LDAP server containing an account with an empty password.

Alerts:

Gentoo

200709-10

2007-09-18

(Log in to post comments)

phpwiki: authentication bypass

Posted Sep 21, 2007 15:02 UTC (Fri) by kreutzm (guest, #4700) [Link]

This is fixed in Debian.