747 matches found
Heap overflow
Heap-based buffer overflow in Novell eDirectory 8.7.3 before 8.7.3.10b, and 8.8 before 8.8.2 FTF2, allows remote attackers to execute arbitrary code via an LDAP search request containing "NULL search parameters."...
CVE-2008-1809
Heap-based buffer overflow in Novell eDirectory 8.7.3 before 8.7.3.10b, and 8.8 before 8.8.2 FTF2, allows remote attackers to execute arbitrary code via an LDAP search request containing "NULL search parameters."...
CVE-2008-3159
Integer overflow in ds.dlm, as used by dhost.exe, in Novell eDirectory 8.7.3.10 before 8.7.3 SP10b and 8.8 before 8.8.2 ftf2 allows remote attackers to execute arbitrary code via unspecified vectors that trigger a stack-based buffer overflow, related to "flawed arithmetic."...
CVE-2008-1809
CVE-2008-1809 affects Novell eDirectory: a heap-based buffer overflow in the LDAP service allows remote, unauthenticated attackers to execute arbitrary code via an LDAP search request containing a NULL search parameter. Vulnerable versions are eDirectory 8.7.3 prior to 8.7.3.10b and 8.8 prior to ...
CVE-2008-1809
Heap-based buffer overflow in Novell eDirectory 8.7.3 before 8.7.3.10b, and 8.8 before 8.8.2 FTF2, allows remote attackers to execute arbitrary code via an LDAP search request containing "NULL search parameters."...
CVE-2008-3159
This CVE affects Novell eDirectory: integer overflow in ds.dlm/dhost.exe (port 524) causing a stack-based buffer overflow that enables remote code execution. Affected versions are eDirectory 8.7.3.10 before 8.7.3 SP10b and 8.8 before 8.8.2 ftf2. The flaw is linked to flawed arithmetic and can be ...
CVE-2008-3159
Integer overflow in ds.dlm, as used by dhost.exe, in Novell eDirectory 8.7.3.10 before 8.7.3 SP10b and 8.8 before 8.8.2 ftf2 allows remote attackers to execute arbitrary code via unspecified vectors that trigger a stack-based buffer overflow, related to "flawed arithmetic."...
ZDI-08-041: Novell eDirectory dhost Integer Overflow Code Execution Vulnerability
ZDI-08-041: Novell eDirectory dhost Integer Overflow Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-041 July 10, 2008 -- Affected Vendors: Novell -- Affected Products: Novell eDirectory -- TippingPointTM IPS Customer Protection: TippingPoint IPS customers have bee...
Novell eDirectory LDAP服务Search参数堆溢出漏洞
BUGTRAQ ID: 30175 CVECAN ID: CVE-2008-1809 Novell eDirectory是一个的跨平台的目录服务器。 eDirectory的LDAP服务在分配用于存储search参数的堆缓冲区时存在计算错误，如果远程攻击者向该服务传送了空的search参数的话，就可以触发堆溢出，破坏堆管理结构和函数指针，导致执行任意指令。溢出缓冲区的数据是非受控的，因此成功利用比较困难。 Novell eDirectory 8.8 Novell eDirectory 8.7.3 临时解决方法：...
iDefense Security Advisory 07.09.08: Novell eDirectory LDAP Search Request Heap Corruption Vulnerability
iDefense Security Advisory 07.09.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 09, 2008 I. BACKGROUND Novell eDirectory is cross-platform directory server that implements the Lightweight Directory Access Protocol LDAP. The search request is used to search a directory tree for...
Novell eDirectory multiple security vulnerabilities
Integer overflows, memory corruptions...
Novell eDirectory dhost Integer Overflow Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell eDirectory. Authentication is not required to exploit this vulnerability. The specific flaw exists within dhost.exe, bound by default to TCP port 524. Flawed arithmetic applied to a...
Novell eDirectory ds.dlm模块整数溢出漏洞
Novell eDirectory是一个的跨平台的目录服务器。 Novell eDirectory中由dhost.exe所加载的ds.dlm模块存在整数溢出漏洞，如果远程攻击者向默认的TCP 524端口发送了恶意请求的话，就可以触发这个溢出，最终导致栈溢出。攻击者可以通过SEH重新定向来利用这个漏洞执行任意指令。 Novell eDirectory 8.8.2 Novell eDirectory 8.7.3 厂商补丁： Novell ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Novell eDirectory < 8.8.2 FTF2 / 8.7.3 SP10b Multiple Remote Overflows
The remote host is running eDirectory, a directory service software from Novell. The installed version of eDirectory is affected by an integer overflow issue in ds.dlm / dhost.exe bound by default to TCP port 524 as well as a heap-based buffer overflow that can be triggered by passing NULL search...
Cross site scripting
Cross-site scripting XSS vulnerability in the iMonitor interface in Novell eDirectory 8.7.3.x before 8.7.3 sp10, and 8.8.x before 8.8.2 ftf2, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters that are used within "error messages of the HTTP stack."...
CVE-2008-0925
Cross-site scripting XSS vulnerability in the iMonitor interface in Novell eDirectory 8.7.3.x before 8.7.3 sp10, and 8.8.x before 8.8.2 ftf2, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters that are used within "error messages of the HTTP stack."...
CVE-2008-0925
Cross-site scripting XSS vulnerability in the iMonitor interface in Novell eDirectory 8.7.3.x before 8.7.3 sp10, and 8.8.x before 8.8.2 ftf2, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters that are used within "error messages of the HTTP stack."...
CVE-2008-0925
Technical details (affected product/version, root cause, impact, or exploit information) are not publicly provided in the supplied documents. Monitor for updates on CVE-2008-0925.
Novell eDirectory HTTP Headers Denial of Service (CVE-2008-0927)
Novell eDirectory is a Lightweight Directory Access Protocol LDAP directory-based identity management system that centralizes the management of user identities, access privileges and many other network resources. A denial of service vulnerability was identified in Novell eDirectory. The...
Novell eDirectory < 8.7.3 SP 10 / 8.8.2 HTTP headers DOS Vulnerability
No description provided by source. = Affected software : Editor : Novell Name : eDirectory Version : 8.7.3 SP 10 and 8.8.2 Services : TCP/8028 HTTP and TCP/8030 HTTPS = External references : http://www.novell.com/support/viewContent.do?externalId=3829452sliceId=1...