CVE-2008-5091

Buffer overflow in the LDAP Service in Novell eDirectory 8.7.3 before SP10a and 8.8 before SP3 allows attackers to cause a denial of service application crash via vectors involving an "invalid extensibleMatch filter."...

CVE-2008-5093

Cross-site scripting XSS vulnerability in the HTTP Protocol Stack HTTPSTK in Novell eDirectory before 8.8 SP3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2008-5094

Heap-based buffer overflow in the NDS Service in Novell eDirectory before 8.8 SP3 has unknown impact and attack vectors...

CVE-2008-5091

CVE-2008-5091 affects Novell eDirectory’s LDAP service; a buffer overflow in the extensibleMatch filter can cause an application crash/DoS. Affected: eDirectory 8.7.3 before SP10a and 8.8 before SP3. Remediation: upgrade to SP10a (8.7.3) or SP3 (8.8) as available.

CVE-2008-5092

CVE-2008-5092 corresponds to a heap-based buffer overflow in Novell eDirectory’s HTTPSTK (HTTP protocol stack) prior to 8.8 SP3. The NVD entry notes unknown impact and attack vectors tied to the HTTP language header and HTTP content-length header. CVSS v2 base score is 10.0 (AV:N/AC:L/Au:N/C:C/I:...

CVE-2008-5094

CVE-2008-5094: Novell eDirectory’s NDS Service on affected platforms (before 8.8 SP3) has a heap-based buffer overflow. The NVD entry notes unknown impact/attack vectors, and OpenVAS entries confirm multiple vulnerabilities in Novell eDirectory (Nov08) affecting Linux/Windows, including CVE-2008-...

CVE-2008-5092

Heap-based buffer overflows in Novell eDirectory HTTP protocol stack HTTPSTK before 8.8 SP3 have unknown impact and attack vectors related to the 1 HTTP language header and 2 HTTP content-length header...

CVE-2008-5093

CVE-2008-5093 is a cross-site scripting (XSS) vulnerability in the HTTP Protocol Stack (HTTPSTK) of Novell eDirectory, affecting versions prior to 8.8 SP3. The issue allows remote injection of arbitrary web script/HTML via unknown vectors. The standard CVSS metrics indicate a network attack vecto...

CVE-2008-5038

Use-after-free vulnerability in the NetWare Core Protocol NCP feature in Novell eDirectory 8.7.3 SP10 before 8.7.3 SP10 FTF1 and 8.8 SP2 for Windows allows remote attackers to cause a denial of service and possibly execute arbitrary code via a sequence of "Get NCP Extension Information By Name"...

Design/Logic Flaw

Use-after-free vulnerability in the NetWare Core Protocol NCP feature in Novell eDirectory 8.7.3 SP10 before 8.7.3 SP10 FTF1 and 8.8 SP2 for Windows allows remote attackers to cause a denial of service and possibly execute arbitrary code via a sequence of "Get NCP Extension Information By Name"...

CVE-2008-5038

Use-after-free vulnerability in the NetWare Core Protocol NCP feature in Novell eDirectory 8.7.3 SP10 before 8.7.3 SP10 FTF1 and 8.8 SP2 for Windows allows remote attackers to cause a denial of service and possibly execute arbitrary code via a sequence of "Get NCP Extension Information By Name"...

CVE-2008-5038

CVE-2008-5038 analyzes a Use-After-Free in the NetWare Core Protocol (NCP) of Novell eDirectory. Affected: eDirectory 8.7.3 SP10 before SP10 FTF1 and 8.8 SP2 for Windows. Root cause: memory corruption caused by a sequence of Get NCP Extension Information By Name requests that cause one thread to ...

PT-2008-6192 · Novell +1 · Netware Core Protocol +2

Name of the Vulnerable Software and Affected Versions: Novell eDirectory versions 8.7.3 SP10 through 8.7.3 SP10 before FTF1 Novell eDirectory version 8.8 SP2 for Windows Description: The issue is related to a use-after-free vulnerability in the NetWare Core Protocol NCP feature. This vulnerabilit...

iDefense Security Advisory 10.30.08: Novell eDirectory NCP Get Extension Information Request Memory Corruption Vulnerability

iDefense Security Advisory 10.03.08 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 03, 2008 I. BACKGROUND Novell eDirectory is cross platform directory server. NetWare Core Protocol, commonly referred to as NCP, is used by eDirectory to synchronize data between servers in the director...

Novell eDirectory memory corruption

Memory corruption on 'Get NCP Extension Information By Name Request' of NCP protocol...

Novell eDirectory NCP Get扩展信息请求远程堆内存破坏漏洞

BUGTRAQ ID: 31956 Novell eDirectory是一个的跨平台的目录服务器。 eDirectory可能会使用已经释放的堆内存区。如果远程攻击者发送了畸形数据的话，就可能导致由一个线程释放堆内存区，之后在另一个线程分配了相同内存区后重新使用，这样原始线程就会对已被第二个线程改变了的数据执行操作，导致以当前服务的权限执行任意指令。 Novell eDirectory 8.8 SP2 Novell ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2008-4479

Heap-based buffer overflow in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.7.3 before 8.7.3.10 ftf1, allows remote attackers to execute arbitrary code via a SOAP request with a long Accept-Language header...

CVE-2008-4480

Heap-based buffer overflow in dhost.exe in Novell eDirectory 8.x before 8.8.3, and 8.7.3 before 8.7.3.10 ftf1, allows remote attackers to execute arbitrary code via a crafted Netware Core Protocol opcode 0x24 message that triggers a calculation error that under-allocates a heap buffer...

CVE-2008-4478

Multiple integer overflows in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.73 before 8.7.3.10 ftf1, allow remote attackers to execute arbitrary code via a crafted 1 Content-Length header in a SOAP request or 2 Netware Core Protocol opcode 0x0F message, which triggers a heap-based buffer...

Heap overflow

Heap-based buffer overflow in dhost.exe in Novell eDirectory 8.x before 8.8.3, and 8.7.3 before 8.7.3.10 ftf1, allows remote attackers to execute arbitrary code via a crafted Netware Core Protocol opcode 0x24 message that triggers a calculation error that under-allocates a heap buffer...