739 matches found
Novell eDirectory Core Protocol Opcode 0x0F Heap Overflow Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell eDirectory Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within dhost.exe, the service responsible for directory replication which is bound b...
Novell eDirectory < 8.7.3 SP10 FTF1 Multiple Vulnerabilities
The remote host is running eDirectory, a directory service software from Novell. The installed version of Novell eDirectory is affected by multiple heap overflows and denial of service vulnerabilities : - DS module is affected by two heap overflow vulnerabilities Bugs 407275, 407256. - EMBOX modu...
Novell eDirectory < 8.8 SP3 Multiple Vulnerabilities (OF, XSS, MC)
The remote host is running eDirectory, a directory service software from Novell. The installed version of Novell eDirectory is affected by multiple issues : - NDS module is affected by a heap overflow vulnerability Bugs 396819 and 396817. - Windows installs of eDirectory NDS module are affected b...
CVE-2008-3539
Unspecified vulnerability in HP OpenView Select Identity HPSI Connectors on Windows, as used in HPSI Active Directory Connector 2.30 and earlier, HPSI SunOne Connector 1.14 and earlier, HPSI eDirectory Connector 1.12 and earlier, HPSI eTrust Connector 1.02 and earlier, HPSI OID Connector 1.02 and...
HP OpenView Select Identity Connectors本地信息泄漏漏洞
BUGTRAQ ID: 31024 CVE ID: CVE-2008-3539 CNCVE ID：CNCVE-20083539 HP OpenView Select Identity Connectors是一款身份管理解决方案包含的组件。 Windows平台下的HP OpenView Select Identity Connectors存在未明安全问题，本地攻击者可以利用漏洞获得敏感信息。 目前没有详细漏洞细节提供。 HP HPSI TOPSecret Connector 2.22.1 HP HPSI SunOne Connector 1.14 HP HPSI RACF Connecto...
eDirectory < 8.8 SP3 Multiple Vulnerabilities
Binary data 4641.prm...
Novell eDirectory Multiple Vulnerabilities - Linux
Novell eDirectory is prone to cross-site scripting XSS, denial of service DoS and remote code execution RCE vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Novell eDirectory Multiple Vulnerabilities - Windows
Novell eDirectory is prone to cross-site scripting XSS, denial of service DoS and remote code execution RCE vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Novell eDirectory Multiple Vulnerabilities (Windows)
This host is running Novell eDirectory, which is prone to XSS, Denial of Service, and Remote Code Execution Vulnerabilities. OpenVAS Vulnerability Test $Id: secpodnovelledirmultvulnwin900209.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: Novell eDirectory Multiple Vulnerabilities Windows...
Novell eDirectory Multiple Vulnerabilities (Linux)
This host is running Novell eDirectory, which is prone to XSS, Denial of Service, and Remote Code Execution Vulnerabilities. OpenVAS Vulnerability Test $Id: secpodnovelledirmultvulnlinux900210.nasl 7823 2017-11-20 08:54:04Z cfischer $ Description: Novell eDirectory Multiple Vulnerabilities Linux...
Novell eDirectory存在多个安全漏洞
CNCAN ID：CNCAN-2008090104 Novell eDirectory是一款支持轻量目录访问协议LDAP并基于目录的身份管理系统。 Novell eDirectory存在多个安全问题，远程攻击者可以利用漏洞进行跨站脚本或任意代码执行攻击。 1存在未明基于堆的缓冲区溢出。 2存在未明内存破坏问题。 3由于不正确处理HTTP "Language"字段数据，可触发基于堆的缓冲区溢出。 4超长"Content-Length"字段数据，可触发基于堆的缓冲区溢出。 5不正确过滤传递给HTTP协议栈的参数，可导致任意HTML注入或脚本代码在目标用户浏览器上执行。 Novell...
Heap overflow
Heap-based buffer overflow in Novell eDirectory 8.7.3 before 8.7.3.10b, and 8.8 before 8.8.2 FTF2, allows remote attackers to execute arbitrary code via an LDAP search request containing "NULL search parameters."...
CVE-2008-1809
Heap-based buffer overflow in Novell eDirectory 8.7.3 before 8.7.3.10b, and 8.8 before 8.8.2 FTF2, allows remote attackers to execute arbitrary code via an LDAP search request containing "NULL search parameters."...
Integer overflow
Integer overflow in ds.dlm, as used by dhost.exe, in Novell eDirectory 8.7.3.10 before 8.7.3 SP10b and 8.8 before 8.8.2 ftf2 allows remote attackers to execute arbitrary code via unspecified vectors that trigger a stack-based buffer overflow, related to "flawed arithmetic."...
CVE-2008-3159
Integer overflow in ds.dlm, as used by dhost.exe, in Novell eDirectory 8.7.3.10 before 8.7.3 SP10b and 8.8 before 8.8.2 ftf2 allows remote attackers to execute arbitrary code via unspecified vectors that trigger a stack-based buffer overflow, related to "flawed arithmetic."...
CVE-2008-1809
CVE-2008-1809 affects Novell eDirectory: a heap-based buffer overflow in the LDAP service allows remote, unauthenticated attackers to execute arbitrary code via an LDAP search request containing a NULL search parameter. Vulnerable versions are eDirectory 8.7.3 prior to 8.7.3.10b and 8.8 prior to ...
CVE-2008-1809
Heap-based buffer overflow in Novell eDirectory 8.7.3 before 8.7.3.10b, and 8.8 before 8.8.2 FTF2, allows remote attackers to execute arbitrary code via an LDAP search request containing "NULL search parameters."...
CVE-2008-3159
Integer overflow in ds.dlm, as used by dhost.exe, in Novell eDirectory 8.7.3.10 before 8.7.3 SP10b and 8.8 before 8.8.2 ftf2 allows remote attackers to execute arbitrary code via unspecified vectors that trigger a stack-based buffer overflow, related to "flawed arithmetic."...
CVE-2008-3159
This CVE affects Novell eDirectory: integer overflow in ds.dlm/dhost.exe (port 524) causing a stack-based buffer overflow that enables remote code execution. Affected versions are eDirectory 8.7.3.10 before 8.7.3 SP10b and 8.8 before 8.8.2 ftf2. The flaw is linked to flawed arithmetic and can be ...
