CVE-2004-2254
SurgeLDAP 1.0g - Unauthenticated Authentication Bypass via Modified utoken Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2004-2254. PoCs published by GSS IT.
AI-analyzed exploit summary The exploit describes an authentication bypass vulnerability in SurgeLDAP's web administration application. By appending a specific URL parameter, an attacker can gain manager access without authentication.
Description
SurgeLDAP 1.0g (Build 12), and possibly other versions before 1.0h, allows remote attackers to bypass authentication for the administration interface via a direct request to admin.cgi with a modified utoken parameter.
Exploits (1)
The exploit describes an authentication bypass vulnerability in SurgeLDAP's web administration application. By appending a specific URL parameter, an attacker can gain manager access without authentication.