NULL BASE queries on your LDAP server ?

LinuxLover · 10-27-2011, 11:16 AM

Hi,

I just configured Opends LDAP server and in our vulnerability scan we are facing the vulnerability of NULL BASE queries on your LDAP server.

I want to ask what is meant by NULL BASE queries on your LDAP server, is it mean anonymous access to LDAP server for query or some thing else.

acid_kewpie · 10-28-2011, 04:25 AM

when you search a directory you'd provide a search base to start from, e.g. "ldapsearch -x -b dc=domain,dc=com" and move up the tree from there. If you don't provide one, you don't need to know *ANYTHING* about the directory tree there and it could just dump out everything from a totally generic search.