CVE-2011-4082 — Uncontrolled Resource Consumption in Project Phpldapadmin

CWE-400 — Uncontrolled Resource Consumption6 documents5 sources
Severity
7.5HIGHNVD
EPSS
0.9%
top 24.00%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Phpldapadmin Project PhpldapadminDebian PhpldapadminPhpldapadmin+1 more
Timeline
PublishedNov 26
Latest updateApr 22

Description

A local file inclusion flaw was found in the way the phpLDAPadmin before 0.9.8 processed certain values of the "Accept-Language" HTTP header. A remote attacker could use this flaw to cause a denial of service via specially-crafted request.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages4 packages

▶debiandebian/phpldapadmin< phpldapadmin 0.9.8-1 (bookworm)
▶CVEListV5phpldapadmin/phpldapadminbefore 0.9.8

Also affects: Debian Linux 10.0, 8.0, 9.0

🔴Vulnerability Details

2
GHSA
GHSA-4857-c55p-2whx: A local file inclusion flaw was found in the way the phpLDAPadmin before 0↗2022-04-22
▶
OSV
CVE-2011-4082: A local file inclusion flaw was found in the way the phpLDAPadmin before 0↗2019-11-26
▶

📋Vendor Advisories

1
Debian
CVE-2011-4082: phpldapadmin - A local file inclusion flaw was found in the way the phpLDAPadmin before 0.9.8 p...↗2011
▶

💬Community

2
Bugzilla
CVE-2011-4082 phpldapadmin: local file inclusion flaw fixed in 0.9.8 [epel-4]↗2011-10-27
▶
Bugzilla
CVE-2011-4082 phpldapadmin: local file inclusion flaw fixed in 0.9.8↗2011-10-27
▶