CVE-2010-0666

CVE-2010-0666 describes a DoS in Novell eDirectory’s eMBox service (8.8 SP5 Patch 2 and earlier) triggered by a crafted SOAP request, allowing remote attackers to crash the service. The vulnerability is distinct from CVE-2008-0926. Connected documents confirm DoS wording and affected versions; no...

Novell eDirectory < 8.8 SP5 Patch 3 eMBox SOAP Request DoS

Binary data 5341.prm...

Novell eDirectory < 8.8 SP5 Patch 3 DoS Vulnerability

Novell eDirectory is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Novell eDirectory NDS Verb Integer Overflow (CVE-2009-0895)

Novell eDirectory is a Lightweight Directory Access Protocol LDAP directory-based identity management system that centralizes the management of user identities, access privileges and many other network resources. An integer overflow was identified in Novell eDirectory. The vulnerability is due to...

CVE-2009-4486

Stack-based buffer overflow in the eDirectory plugin in Novell iManager before 2.7.3 allows remote attackers to execute arbitrary code via vectors that trigger long arguments to an unspecified sub-application, related to importing and exporting from a schema...

CVE-2009-4486

Stack-based buffer overflow in the eDirectory plugin in Novell iManager before 2.7.3 allows remote attackers to execute arbitrary code via vectors that trigger long arguments to an unspecified sub-application, related to importing and exporting from a schema...

CVE-2009-4486

CVE-2009-4486 involves a stack-based buffer overflow in the Novell iManager eDirectory plugin that handles importing/exporting schema data. The root cause is inadequate validation of user-supplied arguments in a sub-application, allowing remote attackers to trigger a long input path and execute a...

Novell iManager eDirectory Plugin Remote Code Execution Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Novell iManager. Authentication is not required to exploit this vulnerability. The flaw exists in an application called by the iManager in order to handle importing/exporting of schema information. While...

Novell eDirectory 8.8 SP5 Buffer Overflow

!usr\bin\perl use WWW::Mechanize; use HTTP::Cookies; use HTTP::Headers; $target=$ARGV0; if!$ARGV0 print "+ Novell eDirectory 8.8 SP5 Post Auth Remote BOF 0day\n"; print "+ Exploit : His0k4 & Simo36\n"; print "Usage:perl $0 target\n"; print "Example : exploit.pl https://192.168.1.2:8030\n"; exit;...

Novell eDirectory 8.8 SP5 - (Authenticated) Remote Buffer Overflow

Novell eDirectory 8.8 SP5 - Authenticated Remote Buffer Overflow Exploit Title: Novell eDirectory 8.8 SP5 Post Auth Remote BOF Exploit 0day Date: 06/01/2010 Author: His0k4 & Simo36 Version: 8.8 SP5 Tested on: Windows xp sp3 Code : !usr\bin\perl use WWW::Mechanize; use HTTP::Cookies; use...

Novell eDirectory 8.8 SP5 (Post Auth) Remote BOF Exploit

Exploit for unknown platform in category remote exploits ======================================================== Novell eDirectory 8.8 SP5 Post Auth Remote BOF Exploit ======================================================== Exploit Title: Novell eDirectory 8.8 SP5 Post Auth Remote BOF Exploit...

Novell eDirectory 8.8 SP5 - (Authenticated) Remote Buffer Overflow

Exploit Title: Novell eDirectory 8.8 SP5 Post Auth Remote BOF Exploit 0day Date: 06/01/2010 Author: His0k4 & Simo36 Version: 8.8 SP5 Tested on: Windows xp sp3 Code : !usr\bin\perl use WWW::Mechanize; use HTTP::Cookies; use HTTP::Headers; $target=$ARGV0; if!$ARGV0 print "+ Novell eDirectory 8.8 SP...

Novell eDirectory evtFilteredMonitorEventsRequest Function Heap Overflow (CVE-2006-4509)

Novell eDirectory is a set of services based on the Lightweight Directory Access Protocol LDAP. On a default installation, the eDirectory LDAP server uses TCP port 389 for clear text LDAP communication. A heap buffer overflow vulnerability exists in the Novell eDirectory product line. The flaw is...

Novell eDirectory HTTP Request Content-Length Heap Buffer Overflow (CVE-2008-4478)

Novell eDirectory is an X.500 and LDAP compatible directory server intended for use as a part of an identity management solution. The product is made available for multiple platforms including NetWare, Unix-like systems, and Windows. There exists a heap buffer overflow vulnerability in Novell...

Novell eDirectory dhost HTTPSTK Buffer Overflow

Novell eDirectory is a Lightweight Directory Access Protocol LDAP server, intended for use as part of an identity management solution. A code execution vulnerability exists in Novell eDirectory. The vulnerability is due to lack of boundary validation when handling HTTP requests to the HTTPSTK for...

Novell eDirectory < 8.8.5.2 / 8.7.3.10 ftf2 'NDS Verb' Request Buffer Overflow

The remote host is running eDirectory, a directory service software from Novell. The installed version of eDirectory is affected by a remote buffer overflow vulnerability. By sending a specially crafted 'NDS Verb 0x1' request, it may be possible for an attacker to execute arbitrary code subject t...

Novell eDirectory SOAP Handling Accept Language Header Heap Overflow (CVE-2008-4479)

Novell eDirectory is an X.500 and LDAP compatible directory service software product developed by Novell, Inc. for centrally managing access to resources on multiple servers and computers within a given network. The product is made available for multiple platforms including NetWare, Unix-like...

Novell eDirectory NDS Verb 0x1请求堆溢出漏洞

BUGTRAQ ID: 37184 CVECAN ID: CVE-2009-0895 Novell eDirectory是一个的跨平台的目录服务器。 eDirectory允许未经认证的用户查询有关特定对象的信息。如果用户发送的服务请求（NDS Verb 0x1）中包含有在内存分配中所使用的整数的话，超大的整数就可以触发整数溢出，之后的分配返回不充分的缓冲区，最终导致堆溢出。 Novell eDirectory 8.8.X Novell eDirectory 8.7.3.X 厂商补丁： Novell ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

eDirectory < 8.8.5.2/8.7.3.10 ftf2 'NDS Verb 0x1' Buffer Overflow

Binary data 5251.prm...

Integer overflow

Integer overflow in Novell eDirectory 8.7.3.x before 8.7.3.10 ftf2 and 8.8.x before 8.8.5.2 allows remote attackers to execute arbitrary code via an NDS Verb 0x1 request containing a large integer value that triggers a heap-based buffer overflow...