Novell eDirectory iMonitor NDS Server Buffer Overflow (CVE-2005-2551; CVE-2006-2496)

Novell eDirectory is a Lightweight Directory Access Protocol LDAP server intended for use as a part of an identity management solution. The product is made available for multiple platforms including NetWare, Unix-like systems, and Windows. iMonitor, one of the many components of eDirectory, is a...

Novell eDirectory iMonitor NDS buffer overflow

Added: 05/30/2006 CVE: CVE-2006-2496 BID: 18026 OSVDB: 25781 Background iMonitor is a web service which is a component of Novell eDirectory. Problem A buffer overflow in iMonitor allows remote attackers to execute arbitrary commands by sending a long, specially crafted URL request in the NDS...

Novell eDirectory 8.8 Long URI iMonitor Buffer Overflow Exploit (meta)

Exploit for unknown platform in category remote exploits ====================================================================== Novell eDirectory 8.8 Long URI iMonitor Buffer Overflow Exploit meta ====================================================================== This file is part of the...

CVE-2006-2496

CVE-2006-2496 affects Novell eDirectory 8.8 (iMonitor 2.4). A stack-based buffer overflow in the iMonitor NDS Server component (HTTP/8028, HTTPS/8030) occurs while parsing long URIs, allowing remote attackers to execute arbitrary code or cause a denial of service. Exploitation does not require au...

Novell eDirectory Server iMonitor Multiple Remote Overflows

The remote host is running a version of eDirectory iMonitor that is vulnerable to a remote buffer overflow. An attacker may exploit this flaw to execute arbitrary code on the remote host or to disable this service remotely. To exploit this flaw, an attacker would need to send a specially crafted...