CVE-2006-4521

CVE-2006-4521 affects Novell eDirectory (versions 8.8 and 8.8.1) via the libnmasldap.so NMAS module. The BerDecodeLoginDataRequest function does not properly increment a pointer when handling certain input, allowing a remote attacker to cause a denial of service (invalid memory access) with a cra...

iDefense Security Advisory 10.27.06: Novell eDirectory NMAS BerDecodeLoginDataRequeset DoS Vulnerability

Novell eDirectory NMAS BerDecodeLoginDataRequeset DoS Vulnerability iDefense Security Advisory 10.27.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 27, 2006 I. BACKGROUND Novell eDirectory is a cross-platform lightweight directory access protocol LDAP server. Additionally, eDirector...