medium5.0Public exploit code
CVE-2013-6796
The SMTP server in DeepOfix 3.3 and earlier allows remote attackers to bypass authentication via an empty password, which triggers an LDAP anonymous bind.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- DeepOfix SMTP Server 3.3 - Authentication Bypass2013-11-19 · remote · linux · Verified
Impact
The SMTP server in DeepOfix 3.3 and earlier allows remote attackers to bypass authentication via an empty password, which triggers an LDAP anonymous bind.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Deeproot Linux | Deepofix | through 3.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/124054
- http://www.exploit-db.com/exploits/29706
- http://www.osvdb.org/100007
- http://www.securityfocus.com/bid/63793
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89077
- http://packetstormsecurity.com/files/124054
- http://www.exploit-db.com/exploits/29706
- http://www.osvdb.org/100007
- http://www.securityfocus.com/bid/63793
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89077