|
Family: CGI abuses --> Category: attack
Sympa invalid LDAP password DoS Vulnerability Scan
Vulnerability Scan Summary Checks for sympa version
Detailed Explanation for this Vulnerability Test
The remote host seems to be running sympa, an open source mailing list
software.
This version of Sympa contains a flaw in the processing of LDAP
passwords. A possible hacker, exploiting this flaw, would need network
access to the webserver. A successful attack would crash the sympa
application and render it useless.
Solution : Update to version 3.4.4.1 or newer
See also: http://www.sympa.org/
Threat Level: Medium
Click HERE for more information and discussions on this network vulnerability scan.
|