Heap overflow

Heap-based buffer overflow in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.7.3 before 8.7.3.10 ftf1, allows remote attackers to execute arbitrary code via a SOAP request with a long Accept-Language header...

Integer overflow

Multiple integer overflows in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.73 before 8.7.3.10 ftf1, allow remote attackers to execute arbitrary code via a crafted 1 Content-Length header in a SOAP request or 2 Netware Core Protocol opcode 0x0F message, which triggers a heap-based buffer...

CVE-2008-4478

Multiple integer overflows in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.73 before 8.7.3.10 ftf1, allow remote attackers to execute arbitrary code via a crafted 1 Content-Length header in a SOAP request or 2 Netware Core Protocol opcode 0x0F message, which triggers a heap-based buffer...

CVE-2008-4480

Heap-based buffer overflow in dhost.exe in Novell eDirectory 8.x before 8.8.3, and 8.7.3 before 8.7.3.10 ftf1, allows remote attackers to execute arbitrary code via a crafted Netware Core Protocol opcode 0x24 message that triggers a calculation error that under-allocates a heap buffer...

CVE-2008-4480

Novell eDirectory’s dhost.exe contains a heap-based overflow in Netware Core Protocol opcode 0x24 handling. An under-allocated heap buffer due to a calculation error enables remote code execution. Affected versions are eDirectory 8.x before 8.8.3 and 8.7.3 before 8.7.3.10 ftf1. The vulnerability ...

CVE-2008-4478

CVE-2008-4478 affects Novell eDirectory. The vulnerability resides in dhost.exe and the SOAP/HTTP web interface, where improper parsing of the SOAP Content-Length header (and certain Core Protocol opcodes, notably 0x0F) triggers a heap-based or arithmetic overflow, enabling remote code execution....

CVE-2008-4479

Heap-based buffer overflow in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.7.3 before 8.7.3.10 ftf1, allows remote attackers to execute arbitrary code via a SOAP request with a long Accept-Language header...

CVE-2008-4479

Novell eDirectory is affected by CVE-2008-4479 due to a heap-based buffer overflow in dhost.exe when processing SOAP requests with an overly long Accept-Language header. A remote attacker can execute arbitrary code with SYSTEM/root privileges on affected installations. Vulnerable versions include...

Novell eDirectory HTTP Request Content-Length Heap Buffer Overflow

A remote code execution vulnerability exists in Novell eDirectory. Novell eDirectory is a cross-platform directory server used for identity management. Novell eDirectory utilizes various protocols to provide information services to various platforms, including HTTP-based SOAP. Novell eDirectory...

Update Protection against Novell eDirectory SOAP Handling Accept Language Header Overflow

A buffer overflow vulnerability exists in Novell eDirectory Directory Services over SOAP. Novell eDirectory is a cross-platform directory server used for identity management. Novell eDirectory utilizes various protocols to provide information services to various platforms, including HTTP-based...

ZDI-08-063: Novell eDirectory dhost.exe Content-Length Header Heap Overflow Vulnerability

ZDI-08-063: Novell eDirectory dhost.exe Content-Length Header Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-063 October 8, 2008 -- CVE ID: CVE-2008-4478 -- Affected Vendors: Novell -- Affected Products: Novell eDirectory -- TippingPointTM IPS Customer Protection:...

Novell eDirectory multiple security vulnerabilities

Multiple buffer overflows on TCP/8028 and TCP/8028 traffic parsing...

Novell eDirectory多个缓冲区溢出漏洞

BUGTRAQ ID: 31553 CVE ID：CVE-2008-4478 CVE-2008-4479 CVE-2008-4480 CNCVE ID：CNCVE-20084478 CNCVE-20084479 CNCVE-20084480 Novell eDirectory是一款支持轻量目录访问协议LDAP并基于目录的身份管理系统。 Novell eDirectory存在多个缓冲区溢出如下： -WEB控制台运行在TCP...

ZDI-08-064: Novell eDirectory dhost.exe Accept Language Header Heap Overflow Vulnerability

ZDI-08-064: Novell eDirectory dhost.exe Accept Language Header Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-064 October 8, 2008 -- CVE ID: CVE-2008-4479 -- Affected Vendors: Novell -- Affected Products: Novell eDirectory -- TippingPointTM IPS Customer Protection:...

ZDI-08-065: Novell eDirectory Core Protocol Opcode 0x0F Heap Overflow Vulnerability

ZDI-08-065: Novell eDirectory Core Protocol Opcode 0x0F Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-065 October 8, 2008 -- CVE ID: CVE-2008-4478 -- Affected Vendors: Novell -- Affected Products: Novell eDirectory -- TippingPointTM IPS Customer Protection:...

ZDI-08-066: Novell eDirectory Core Protocol Opcode 0x24 Heap Overflow Vulnerability

ZDI-08-066: Novell eDirectory Core Protocol Opcode 0x24 Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-066 October 8, 2008 -- CVE ID: CVE-2008-4480 -- Affected Vendors: Novell -- Affected Products: Novell eDirectory -- TippingPointTM IPS Customer Protection:...

Novell eDirectory dhost.exe Accept Language Header Heap Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Novell eDirectory. Authentication is not required to exploit this vulnerability. The specific flaw resides in the web console running on TCP ports 8028 and 8030. The server exposes a web interface and...

eDirectory < 8.7.3 SP10 FTF1 Multiple Vulnerabilities

Binary data 4704.prm...

Novell eDirectory Core Protocol Opcode 0x24 Heap Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell eDirectory Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within dhost.exe, the service responsible for directory replication which is bound b...

Novell eDirectory dhost.exe Content-Length Header Heap Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Novell eDirectory. Authentication is not required to exploit this vulnerability. The specific flaw resides in the web console running on TCP ports 8028 and 8030. The server exposes a web interface and...