DokuWiki 2014-05-05a and earlier when using Active Directory for LDAP authentication allows remote attackers to bypass authentication via a user name and password starting with a null (\\0) character which triggers an anonymous bind.