CVE-2011-1024 Auth bypass in n/a

Medium 4.6 Published 20 Mar 2011 Updated 6 Aug 2024

Authenticated users can bypass external-program authentication in OpenLDAP when specific chain overlay configurations are enabled.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2011-1024?

CVE-2011-1024 is a medium-severity authentication bypass vulnerability in Openldap Openldap, published on 20 Mar 2011. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicy_forward_updates (aka authentication-failure forwarding) is used, allows remote authenticated users to bypass external-program authentication by sending an invalid password to a slave server.

Weakness: CWE-264

Which versions are affected by CVE-2011-1024?

It affects 1 product.

Linux distribution packages (8)

`compat-openldap` Red Hat:enterprise_linux:5::server	All versions	`0:2.3.43_2.2.29-12.el5_6.7`
`openldap` Red Hat:enterprise_linux:5::server	All versions	`0:2.3.43-12.el5_6.7`
`openldap-clients` Red Hat:enterprise_linux:5::server	All versions	`0:2.3.43-12.el5_6.7`
`openldap-debuginfo` Red Hat:enterprise_linux:5::server	All versions	`0:2.3.43-12.el5_6.7`
`openldap-devel` Red Hat:enterprise_linux:5::server	All versions	`0:2.3.43-12.el5_6.7`
`openldap-servers` Red Hat:enterprise_linux:5::server	All versions	`0:2.3.43-12.el5_6.7`
`openldap-servers-overlays` Red Hat:enterprise_linux:5::server	All versions	`0:2.3.43-12.el5_6.7`
`openldap-servers-sql` Red Hat:enterprise_linux:5::server	All versions	`0:2.3.43-12.el5_6.7`

Products include Openldap Openldap.

How do I fix CVE-2011-1024?

Upgrade to a fixed version.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2011-1024 being exploited?

There is no known exploitation of CVE-2011-1024 in the wild and no public exploit code.

All Openldap Openldap vulnerabilities

Sources

Also known as DEBIAN-CVE-2011-1024, GHSA-v9w5-g35w-fmjv, RHSA-2011:0346.