PT-2008-1803 · Aruba · Aruba Mobility Controller

Robbie Gill · Published 2008-01-09 · Updated 2018-10-15 · CVE-2008-0150

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Aruba Mobility Controller versions 2.3.6.15 through 2.5.5.7 Aruba Mobility Controller version 2.4.8.11-FIPS

Description The issue concerns an unspecified vulnerability in the LDAP authentication feature. This vulnerability allows remote attackers to bypass authentication mechanisms, potentially obtaining management or VPN interface access.

Recommendations For Aruba Mobility Controller versions 2.3.6.15 through 2.5.5.7, update to a version later than 2.5.5.7 to resolve the issue. For Aruba Mobility Controller version 2.4.8.11-FIPS, update to a version later than 2.4.8.11-FIPS to resolve the issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2008-0150

Affected Products

Aruba Mobility Controller

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2008-0150 · Security Note
• http://secunia.com/advisories/28357 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0150 · Note
• http://securityreason.com/securityalert/3529 · Note
• http://securityfocus.com/bid/27144 · Note
• http://arubanetworks.com/support/alerts/aid-122207.asc · Note
• http://securityfocus.com/archive/1/485831/100/0/threaded · Note