Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The (1) Zend_Ldap class in Zend before 1.12.9 and (2) Zend\Ldap component in Zend 2.x before 2.2.8 and 2.3.x before 2.3.3 allows remote attackers to bypass authentication via a password starting with a null byte, which triggers an unauthenticated bind.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Zend Framework 身份验证绕过漏洞
Vulnerability Description
Zend Framework（ZF）是美国Zend公司开发的一套开源的PHP5开发框架，它主要用于开发Web程序和服务。 ZF 1.12.9之前版本的‘Zend_Ldap’类和ZF 2.2.8之前2.x版本和2.3.3之前2.3.x版本的Zend\Ldap组件中存在安全漏洞。远程攻击者可借助以空字节开头的密码利用该漏洞绕过身份验证。
CVSS Information
N/A
Vulnerability Type
N/A