748 matches found
CVE-2012-0432
Stack-based buffer overflow in the Novell NCP implementation in NetIQ eDirectory 8.8.7.x before 8.8.7.2 allows remote attackers to have an unspecified impact via unknown vectors...
CVE-2012-0432
Stack-based buffer overflow in the Novell NCP implementation in NetIQ eDirectory 8.8.7.x before 8.8.7.2 allows remote attackers to have an unspecified impact via unknown vectors...
CVE-2012-0429
CVE-2012-0429 affects NetIQ/Novell eDirectory 8.8.6.x (before 8.8.6.7) and 8.8.7.x (before 8.8.7.2) on Windows. The vulnerability is in the dhost component where crafted characters in an HTTP request allow remote authenticated users to trigger a denial of service (daemon crash). Impact as reporte...
CVE-2012-0428
CVE-2012-0428 affects NetIQ eDirectory 8.8.x: a Cross-site Scripting (XSS) vulnerability in the web interface allows remote attackers to inject arbitrary script/HTML via unspecified vectors. The vulnerability exists in 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2, with the impact on the user...
CVE-2012-0430
CVE-2012-0430 affects NetIQ eDirectory 8.8.6.x (before 8.8.6.7) and 8.8.7.x (before 8.8.7.2) on Windows. The vulnerability allows remote attackers to obtain an administrator cookie and bypass authorization checks via unknown vectors. Multiple connected sources corroborate this CVE as part of a se...
Novell eDirectory dhost服务/NCP实现内多个安全漏洞
BUGTRAQ ID: 57038 CVECAN ID: CVE-2012-0428,CVE-2012-0429,CVE-2012-0430,CVE-2012-0432 Novell eDirectory是一个跨平台的目录服务器。 Novell eDirectory 8.8.7.2、8.8.6.7之前版本存在跨站脚本、拒绝服务、信息泄露、栈缓冲区溢出漏洞，利用这些漏洞，攻击者可在受影响浏览器中执行任意脚本代码、窃取cookie、泄露敏感信息、执行任意代码、造成拒绝服务。 1）在处理某些字符时，dhost服务内存在错误，可被利用通过特制的HTTP请求造成拒绝服务。此漏洞仅影响Windwos...
VulnCheck KEV: CVE-2012-0432
Stack-based buffer overflow in the Novell NCP implementation in NetIQ eDirectory 8.8.7.x before 8.8.7.2 allows remote attackers to have an unspecified impact via unknown vectors...
Novell eDirectory 8 Buffer Overflow
This exploit abuses a buffer overflow vulnerability in Novell eDirectory. The vulnerability exists in the ndsd daemon, specifically in the NCP service, while parsing a specially crafted Keyed Object Login request. It allows remote code execution with root privileges. Module Options msf use...
Novell eDirectory Multiple Buffer Overflow Vulnerabilities (CVE-2006-5478) - Active Check
Novell eDirectory is prone to multiple multiple stack based buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CP...
Novell eDirectory < 8.8 SP6 Patch 5 Multiple Vulnerabilities
The remote host is running eDirectory, a directory service application from Novell. According to its self-reported version number, this software is affected by multiple stack-based buffer overflow and memory corruption vulnerabilities. A remote, unauthenticated attacker could exploit the most...
Novell eDirectory buffer overflow
Buffer overflow in RelativeToFullDN on LDAP request processing...
ZDI-12-146 : Novell eDirectory RelativeToFullDN Parsing Remote Code Execution Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-146 : Novell eDirectory RelativeToFullDN Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-146 August 22, 2012 - -- CVE ID: - -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C - -- Affected Vendors: Novell - -...
Novell eDirectory RelativeToFullDN Parsing Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell eDirectory. Authentication is not required to exploit this vulnerability. The specific flaw exists within how the service handles a specially formatted LDAP request. When handling a particul...
Novell eDirectory Unchecked Length Denial of Service
A denial of service vulnerability has been reported in Novell eDirectory...
Novell eDirectory eMBox Unauthenticated File Access
This module will access Novell eDirectory's eMBox service and can run the following actions via the SOAP interface: GETDN, READLOGS, LISTSERVICES, STOPSERVICE, STARTSERVICE, SETLOGFILE. This module requires Metasploit: https://metasploit.com/download Current source:...
ZDI-11-278: Novell Cloud Manager Insufficient Framework User Validation Vulnerability
ZDI-11-278: Novell Cloud Manager Insufficient Framework User Validation Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-278 September 2, 2011 -- CVE ID: CVE-2011-2654 -- CVSS: 9.3, AV:N/AC:M/Au:N/C:C/I:C/A:C -- Affected Vendors: Novell -- Affected Products: Novell eDirectory --...
ncp-serverinfo NSE Script
Retrieves eDirectory server information OS version, server name, mounts, etc. from the Novell NetWare Core Protocol NCP service. Example Usage nmap -sV -sC Script Output PORT STATE SERVICE 524/tcp open ncp | ncp-serverinfo: | Server name: LINUX-L84T | Tree Name: IIT-LABTREE | OS Version: 5.70 rev...
ncp-enum-users NSE Script
Retrieves a list of all eDirectory users from the Novell NetWare Core Protocol NCP service. Example Usage nmap -sV --script=ncp-enum-users Script Output PORT STATE SERVICE REASON 524/tcp open ncp syn-ack | ncp-enum-users: | CN=admin.O=cqure | CN=cawi.OU=finance.O=cqure | CN=linux-l84tadmin.O=cqur...
ldap-novell-getpass NSE Script
Universal Password enables advanced password policies, including extended characters in passwords, synchronization of passwords from eDirectory to other systems, and a single password for all access to eDirectory. In case the password policy permits administrators to retrieve user passwords "Allo...
Novell eDirectory/Netware LDAP-SSL后台程序漏洞
Novell eDirectory是一个的跨平台的目录服务器。 Novell eDirectory/Netware LDAP-SSL后台程序在实现上存在拒绝服务漏洞，由于系统不恰当地分配用户指定的内存量，攻击者可利用此漏洞造成系统范围内的拒绝服务。 Novell Netware Novell eDirectory 厂商补丁： Novell ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://support.novell.com/security-alerts !/usr/bin/perl usage: ./novell.pl 10.0.0.1...