Back to Database
Status published
Medium
CVE-2014-8764
DokuWiki 2014-05-05a and earlier, when using Active Directory for LDAP...
Vulnerability Description
DokuWiki 2014-05-05a and earlier, when using Active Directory for LDAP authentication, allows remote attackers to bypass authentication via a user name and password starting with a null (\0) character, which triggers an anonymous bind.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-8764
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.freelists.org/post/dokuwiki/Fwd-Dokuwiki-maybe-security-issue-Null-byte-poisoning-in-LDAP-authentication
- http://secunia.com/advisories/61983
- http://advisories.mageia.org/MGASA-2014-0438.html
- http://www.openwall.com/lists/oss-security/2014/10/13/3
- http://www.openwall.com/lists/oss-security/2014/10/16/9
- http://www.debian.org/security/2014/dsa-3059
- https://github.com/splitbrain/dokuwiki/pull/868
More from mageia project
View All →CVE-2015-2296
The resolve_redirects function in sessions.py in requests 2.1.0 through 2.5.3...
Medium
6.8
CVE-2014-9037
WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and...
Medium
6.8
CVE-2014-3424
lisp/net/tramp-sh.el in GNU Emacs 24.3 and earlier allows local users...
Low
3.3
CVE-2014-3423
lisp/net/browse-url.el in GNU Emacs 24.3 and earlier allows local users...
Low
3.3
CVE-2014-3421
lisp/gnus/gnus-fun.el in GNU Emacs 24.3 and earlier allows local users...
Low
3.3
Affected Vendor
mageia project
View all reports →Affected Software
mageia, dokuwiki
Vulnerable Versions:
3.0, 4.0, 0
Timeline
Official Publish:
October 22nd, 2014
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.