From 83fc5743d999a2bb8ca13def0e80c2e999e20571 Mon Sep 17 00:00:00 2001
From: Reed Loden <reed@reedloden.com>
Date: Thu, 30 Aug 2012 20:26:01 +0200
Subject: Bug 785470: (CVE-2012-3981) [SECURITY] Missing escaping of the
 username can lead to LDAP injection r/a=LpSolit

---
 Bugzilla/Auth/Verify/LDAP.pm | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'Bugzilla/Auth')

diff --git a/Bugzilla/Auth/Verify/LDAP.pm b/Bugzilla/Auth/Verify/LDAP.pm
index 0b5113e52..5704c5848 100644
--- a/Bugzilla/Auth/Verify/LDAP.pm
+++ b/Bugzilla/Auth/Verify/LDAP.pm
@@ -18,6 +18,7 @@ use Bugzilla::User;
 use Bugzilla::Util;
 
 use Net::LDAP;
+use Net::LDAP::Util qw(escape_filter_value);
 
 use constant admin_can_create_account => 0;
 use constant user_can_create_account  => 0;
@@ -121,6 +122,7 @@ sub check_credentials {
 
 sub _bz_search_params {
     my ($username) = @_;
+    $username = escape_filter_value($username);
     return (base   => Bugzilla->params->{"LDAPBaseDN"},
             scope  => "sub",
             filter => '(&(' . Bugzilla->params->{"LDAPuidattribute"} 
-- 
cgit v1.2.3-24-g4f1b