747 matches found
PT-2008-6192 · Novell +1 · Netware Core Protocol +2
Name of the Vulnerable Software and Affected Versions: Novell eDirectory versions 8.7.3 SP10 through 8.7.3 SP10 before FTF1 Novell eDirectory version 8.8 SP2 for Windows Description: The issue is related to a use-after-free vulnerability in the NetWare Core Protocol NCP feature. This vulnerabilit...
Novell eDirectory memory corruption
Memory corruption on 'Get NCP Extension Information By Name Request' of NCP protocol...
iDefense Security Advisory 10.30.08: Novell eDirectory NCP Get Extension Information Request Memory Corruption Vulnerability
iDefense Security Advisory 10.03.08 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 03, 2008 I. BACKGROUND Novell eDirectory is cross platform directory server. NetWare Core Protocol, commonly referred to as NCP, is used by eDirectory to synchronize data between servers in the director...
Novell eDirectory NCP Get扩展信息请求远程堆内存破坏漏洞
BUGTRAQ ID: 31956 Novell eDirectory是一个的跨平台的目录服务器。 eDirectory可能会使用已经释放的堆内存区。如果远程攻击者发送了畸形数据的话，就可能导致由一个线程释放堆内存区，之后在另一个线程分配了相同内存区后重新使用，这样原始线程就会对已被第二个线程改变了的数据执行操作，导致以当前服务的权限执行任意指令。 Novell eDirectory 8.8 SP2 Novell ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
CVE-2008-4479
Heap-based buffer overflow in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.7.3 before 8.7.3.10 ftf1, allows remote attackers to execute arbitrary code via a SOAP request with a long Accept-Language header...
CVE-2008-4480
Heap-based buffer overflow in dhost.exe in Novell eDirectory 8.x before 8.8.3, and 8.7.3 before 8.7.3.10 ftf1, allows remote attackers to execute arbitrary code via a crafted Netware Core Protocol opcode 0x24 message that triggers a calculation error that under-allocates a heap buffer...
CVE-2008-4478
Multiple integer overflows in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.73 before 8.7.3.10 ftf1, allow remote attackers to execute arbitrary code via a crafted 1 Content-Length header in a SOAP request or 2 Netware Core Protocol opcode 0x0F message, which triggers a heap-based buffer...
Heap overflow
Heap-based buffer overflow in dhost.exe in Novell eDirectory 8.x before 8.8.3, and 8.7.3 before 8.7.3.10 ftf1, allows remote attackers to execute arbitrary code via a crafted Netware Core Protocol opcode 0x24 message that triggers a calculation error that under-allocates a heap buffer...
Integer overflow
Multiple integer overflows in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.73 before 8.7.3.10 ftf1, allow remote attackers to execute arbitrary code via a crafted 1 Content-Length header in a SOAP request or 2 Netware Core Protocol opcode 0x0F message, which triggers a heap-based buffer...
Heap overflow
Heap-based buffer overflow in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.7.3 before 8.7.3.10 ftf1, allows remote attackers to execute arbitrary code via a SOAP request with a long Accept-Language header...
CVE-2008-4479
Novell eDirectory is affected by CVE-2008-4479 due to a heap-based buffer overflow in dhost.exe when processing SOAP requests with an overly long Accept-Language header. A remote attacker can execute arbitrary code with SYSTEM/root privileges on affected installations. Vulnerable versions include...
CVE-2008-4479
Heap-based buffer overflow in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.7.3 before 8.7.3.10 ftf1, allows remote attackers to execute arbitrary code via a SOAP request with a long Accept-Language header...
CVE-2008-4478
CVE-2008-4478 affects Novell eDirectory. The vulnerability resides in dhost.exe and the SOAP/HTTP web interface, where improper parsing of the SOAP Content-Length header (and certain Core Protocol opcodes, notably 0x0F) triggers a heap-based or arithmetic overflow, enabling remote code execution....
CVE-2008-4478
Multiple integer overflows in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.73 before 8.7.3.10 ftf1, allow remote attackers to execute arbitrary code via a crafted 1 Content-Length header in a SOAP request or 2 Netware Core Protocol opcode 0x0F message, which triggers a heap-based buffer...
CVE-2008-4480
Heap-based buffer overflow in dhost.exe in Novell eDirectory 8.x before 8.8.3, and 8.7.3 before 8.7.3.10 ftf1, allows remote attackers to execute arbitrary code via a crafted Netware Core Protocol opcode 0x24 message that triggers a calculation error that under-allocates a heap buffer...
CVE-2008-4480
Novell eDirectory’s dhost.exe contains a heap-based overflow in Netware Core Protocol opcode 0x24 handling. An under-allocated heap buffer due to a calculation error enables remote code execution. Affected versions are eDirectory 8.x before 8.8.3 and 8.7.3 before 8.7.3.10 ftf1. The vulnerability ...
Novell eDirectory HTTP Request Content-Length Heap Buffer Overflow
A remote code execution vulnerability exists in Novell eDirectory. Novell eDirectory is a cross-platform directory server used for identity management. Novell eDirectory utilizes various protocols to provide information services to various platforms, including HTTP-based SOAP. Novell eDirectory...
Update Protection against Novell eDirectory SOAP Handling Accept Language Header Overflow
A buffer overflow vulnerability exists in Novell eDirectory Directory Services over SOAP. Novell eDirectory is a cross-platform directory server used for identity management. Novell eDirectory utilizes various protocols to provide information services to various platforms, including HTTP-based...
ZDI-08-064: Novell eDirectory dhost.exe Accept Language Header Heap Overflow Vulnerability
ZDI-08-064: Novell eDirectory dhost.exe Accept Language Header Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-064 October 8, 2008 -- CVE ID: CVE-2008-4479 -- Affected Vendors: Novell -- Affected Products: Novell eDirectory -- TippingPointTM IPS Customer Protection:...