Novell eDirectory NDS Verb Integer Overflow (CVE-2009-0895)

Novell eDirectory is a Lightweight Directory Access Protocol LDAP directory-based identity management system that centralizes the management of user identities, access privileges and many other network resources. An integer overflow was identified in Novell eDirectory. The vulnerability is due to...

CVE-2009-0895

Integer overflow in Novell eDirectory 8.7.3.x before 8.7.3.10 ftf2 and 8.8.x before 8.8.5.2 allows remote attackers to execute arbitrary code via an NDS Verb 0x1 request containing a large integer value that triggers a heap-based buffer overflow...

CVE-2009-0895

The CVE-2009-0895 vulnerability affects Novell eDirectory 8.7.3.x (pre-8.7.3.10 ftf2) and 8.8.x (pre-8.8.5.2). It is caused by an integer overflow in processing NDS Verb 0x1 requests, leading to a heap-based buffer overflow that enables remote code execution. Public sources in the connected docum...