Novell eDirectory DoS

CPU exhaustion on TCP/8028 requests processing...

Novell eDirectory Multiple Vulnerabilities - Jul09 (Linux)

This host is running Novell eDirectory and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodnovelledirmultvulnjul09lin.nasl 5122 2017-01-27 12:16:00Z teissa $ Novell eDirectory Multiple Vulnerabilities - Jul09 Linux Authors: Nikita MR Copyright: Copyright c 2009 SecPod,...

Novell eDirectory Multiple Vulnerabilities - Jul09 (Windows)

This host is running Novell eDirectory and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodnovelledirmultvulnjul09win.nasl 8201 2017-12-20 14:28:50Z cfischer $ Novell eDirectory Multiple Vulnerabilities - Jul09 Windows Authors: Nikita MR Copyright: Copyright c 2009...

Novell Products Detection (Linux/Unix SSH Login)

This script retrieves the installed version of Novell products. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Novell eDirectory Multiple Vulnerabilities (Jul 2009) - Linux

Novell eDirectory is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Novell eDirectory Multiple Vulnerabilities (Jul 2009) - Windows

Novell eDirectory is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:novell:edirectory";...

Update Protection against Novell Client NetIdentity Agent Remote Code Execution

A remote code execution vulnerability exists in Novell Client NetIdentity Agent. The Novell NetIdentity agent works with eDirectory authentication to provide background authentication to Windows Web-based applications that require eDirectory authentication. The flaw is due to insufficient sanity...

Novell eDirectory多个拒绝服务漏洞

BUGTRAQ ID: 35666 CVECAN ID: CVE-2009-0192 Novell eDirectory是一个的跨平台的目录服务器。 eDirectory的iMonitor组件在处理HTTP请求时存在栈溢出漏洞。如果攻击者发送了带有畸形Accept-Language头的HTTP请求，就可以触发这个溢出，导致服务器崩溃。 此外RDN中的多个通配符和LDAP报文也可能导致拒绝服务的情况。 Novell eDirectory 8.8 SP3 FTF3 Novell eDirectory 8.8 SP3 厂商补丁： Novell ------...

Novell eDirectory < 8.8 SP5 Multiple Vulnerabilities

The remote host is running eDirectory, a directory service software from Novell. The installed version of this software is affected by multiple issues : - Malformed bind LDAP packet causes eDir crash. Bug 492692 - The use of multiple wildcards in RDNs can trigger a remote denial of service...

eDirectory < 8.8 SP5 Multiple Vulnerabilities

Binary data 5098.prm...

Stack overflow

Off-by-one error in the iMonitor component in Novell eDirectory 8.8 SP3, 8.8 SP3 FTF3, and possibly other versions allows remote attackers to execute arbitrary code via an HTTP request with a crafted Accept-Language header, which triggers a stack-based buffer overflow...

Design/Logic Flaw

The DS\NDSD component in Novell eDirectory 8.8 before SP5 allows remote attackers to cause a denial of service ndsd core dump via an LDAP request containing multiple . dot wildcard characters in the Relative Distinguished Name RDN...

Code injection

The DS\NDSD component in Novell eDirectory 8.8 before SP5 allows remote attackers to cause a denial of service crash via a malformed bind LDAP packet...

CVE-2009-2456

The DS\NDSD component in Novell eDirectory 8.8 before SP5 allows remote attackers to cause a denial of service ndsd core dump via an LDAP request containing multiple . dot wildcard characters in the Relative Distinguished Name RDN...

CVE-2009-0192

Off-by-one error in the iMonitor component in Novell eDirectory 8.8 SP3, 8.8 SP3 FTF3, and possibly other versions allows remote attackers to execute arbitrary code via an HTTP request with a crafted Accept-Language header, which triggers a stack-based buffer overflow...

CVE-2009-0192

Off-by-one error in the iMonitor component in Novell eDirectory 8.8 SP3, 8.8 SP3 FTF3, and possibly other versions allows remote attackers to execute arbitrary code via an HTTP request with a crafted Accept-Language header, which triggers a stack-based buffer overflow...

CVE-2009-2457

The DS\NDSD component in Novell eDirectory 8.8 before SP5 allows remote attackers to cause a denial of service crash via a malformed bind LDAP packet...

CVE-2009-2457

CVE-2009-2457 affects Novell eDirectory 8.8 before SP5, specifically the DSNDSD component. A malformed bind LDAP packet allows remote attackers to cause a denial of service (crash). The open-source/enterprise advisories in the connected documents corroborate that multiple vulnerability entries re...

CVE-2009-2456

CVE-2009-2456 affects Novell eDirectory 8.8 before SP5. The DS/NDSD component is vulnerable to a remote denial of service via an LDAP request containing multiple dot wildcard characters in the Relative Distinguished Name (RDN), causing an nsd core dump. Documented impact is denial of service with...

CVE-2009-0192

Concrete details found: CVE-2009-0192 affects Novell eDirectory (iMonitor) with a stack-based buffer overflow triggered by a crafted Accept-Language HTTP header, enabling remote code execution on affected versions (notably eDirectory 8.8 SP3 and SP3 FTF3; other versions possibly impacted). Root c...