Summaryinfo

A vulnerability has been found in Ldaptive and classified as critical. Affected by this vulnerability is the function DefaultHostnameVerifier of the component X.509 Certificate. The manipulation of the argument CN as part of Certificate leads to certificate validation. This vulnerability is known as CVE-2014-3607. The attack can be launched remotely. There is no exploit available. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Detailsinfo

A vulnerability, which was classified as critical, was found in Ldaptive (Directory Service Software) (affected version unknown). Affected is the function DefaultHostnameVerifier of the component X.509 Certificate. The manipulation of the argument CN as part of a Certificate leads to a certificate validation vulnerability. CWE is classifying the issue as CWE-295. The product does not validate, or incorrectly validates, a certificate. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

DefaultHostnameVerifier in Ldaptive (formerly vt-ldap) does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

The bug was discovered 09/10/2014. The weakness was shared 01/08/2018 (Website). The advisory is shared for download at shibboleth.net. This vulnerability is traded as CVE-2014-3607 since 05/14/2014. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. There are known technical details, but no exploit is available. The MITRE ATT&CK project declares the attack technique as T1587.003.

The vulnerability was handled as a non-public zero-day exploit for at least 1216 days. During that time the estimated underground price was around $0-$5k.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Directory Service Software

Name

• Ldaptive

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion