739 matches found
Novell eDirectory LDAP服务Search参数堆溢出漏洞
BUGTRAQ ID: 30175 CVECAN ID: CVE-2008-1809 Novell eDirectory是一个的跨平台的目录服务器。 eDirectory的LDAP服务在分配用于存储search参数的堆缓冲区时存在计算错误，如果远程攻击者向该服务传送了空的search参数的话，就可以触发堆溢出，破坏堆管理结构和函数指针，导致执行任意指令。溢出缓冲区的数据是非受控的，因此成功利用比较困难。 Novell eDirectory 8.8 Novell eDirectory 8.7.3 临时解决方法：...
iDefense Security Advisory 07.09.08: Novell eDirectory LDAP Search Request Heap Corruption Vulnerability
iDefense Security Advisory 07.09.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 09, 2008 I. BACKGROUND Novell eDirectory is cross-platform directory server that implements the Lightweight Directory Access Protocol LDAP. The search request is used to search a directory tree for...
ZDI-08-041: Novell eDirectory dhost Integer Overflow Code Execution Vulnerability
ZDI-08-041: Novell eDirectory dhost Integer Overflow Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-041 July 10, 2008 -- Affected Vendors: Novell -- Affected Products: Novell eDirectory -- TippingPointTM IPS Customer Protection: TippingPoint IPS customers have bee...
Novell eDirectory dhost Integer Overflow Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell eDirectory. Authentication is not required to exploit this vulnerability. The specific flaw exists within dhost.exe, bound by default to TCP port 524. Flawed arithmetic applied to a...
Novell eDirectory ds.dlm模块整数溢出漏洞
Novell eDirectory是一个的跨平台的目录服务器。 Novell eDirectory中由dhost.exe所加载的ds.dlm模块存在整数溢出漏洞，如果远程攻击者向默认的TCP 524端口发送了恶意请求的话，就可以触发这个溢出，最终导致栈溢出。攻击者可以通过SEH重新定向来利用这个漏洞执行任意指令。 Novell eDirectory 8.8.2 Novell eDirectory 8.7.3 厂商补丁： Novell ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Novell eDirectory < 8.8.2 FTF2 / 8.7.3 SP10b Multiple Remote Overflows
The remote host is running eDirectory, a directory service software from Novell. The installed version of eDirectory is affected by an integer overflow issue in ds.dlm / dhost.exe bound by default to TCP port 524 as well as a heap-based buffer overflow that can be triggered by passing NULL search...
Cross site scripting
Cross-site scripting XSS vulnerability in the iMonitor interface in Novell eDirectory 8.7.3.x before 8.7.3 sp10, and 8.8.x before 8.8.2 ftf2, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters that are used within "error messages of the HTTP stack."...
CVE-2008-0925
Cross-site scripting XSS vulnerability in the iMonitor interface in Novell eDirectory 8.7.3.x before 8.7.3 sp10, and 8.8.x before 8.8.2 ftf2, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters that are used within "error messages of the HTTP stack."...
CVE-2008-0925
Cross-site scripting XSS vulnerability in the iMonitor interface in Novell eDirectory 8.7.3.x before 8.7.3 sp10, and 8.8.x before 8.8.2 ftf2, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters that are used within "error messages of the HTTP stack."...
CVE-2008-0925
Technical details (affected product/version, root cause, impact, or exploit information) are not publicly provided in the supplied documents. Monitor for updates on CVE-2008-0925.
Novell eDirectory HTTP Headers Denial of Service (CVE-2008-0927)
Novell eDirectory is a Lightweight Directory Access Protocol LDAP directory-based identity management system that centralizes the management of user identities, access privileges and many other network resources. A denial of service vulnerability was identified in Novell eDirectory. The...
Novell eDirectory < 8.7.3 SP 10 / 8.8.2 HTTP headers DOS Vulnerability
No description provided by source. = Affected software : Editor : Novell Name : eDirectory Version : 8.7.3 SP 10 and 8.8.2 Services : TCP/8028 HTTP and TCP/8030 HTTPS = External references : http://www.novell.com/support/viewContent.do?externalId=3829452sliceId=1...
Novell eDirectory eMBox工具edirutil命令绕过认证漏洞
BUGTRAQ ID: 28441 CVECAN ID: CVE-2008-0926 Novell eDirectory是一个的跨平台的目录服务器。 Novell eDirectory处理访问认证时存在漏洞，远程攻击者可能利用此漏洞获取非授权访问。 可通过/SOAP URL使用Novell...
Novell eDirectory Version Detection
Binary data 4495.prm...
Novell eDirectory DoS via HTTP headers
= Affected software : Editor : Novell Name : eDirectory Version : 8.7.3 SP 10 and 8.8.2 Services : TCP/8028 HTTP and TCP/8030 HTTPS = External references : http://www.novell.com/support/viewContent.do?externalId=3829452&sliceId=1 https://vulners.com/cve/CVE-2008-0927 = Technical details : The...
novelledir-dos.txt
= Affected software : Editor : Novell Name : eDirectory Version : 8.7.3 SP 10 and 8.8.2 Services : TCP/8028 HTTP and TCP/8030 HTTPS = External references : http://www.novell.com/support/viewContent.do?externalId=3829452&sliceId=1 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0927 =...
Novell eDirectory unauthenticated access to SOAP interface
= Affected software : Editor : Novell Name : eDirectory Version : 8.7.x see note and 8.8.2 Services : TCP/8028 HTTP and TCP/8030 HTTPS = External references : http://www.novell.com/support/viewContent.do?externalId=3866911&sliceId=1 https://vulners.com/cve/CVE-2008-0926 = Technical details : A SO...
Novell eDirectory multiple security vulnerabilities
HTTP interface TCP/8028 TCP/8030 DoS, SOAP interface unauthroized access TCP/8028 TCP/8030...
Novell eDirectory 8.7.3 SP 10 8.8.2 - HTTP headers Denial of Service
Novell eDirectory 8.7.3 SP 10 8.8.2 - HTTP headers Denial of Service = Affected software : Editor : Novell Name : eDirectory Version : 8.7.3 SP 10 and 8.8.2 Services : TCP/8028 HTTP and TCP/8030 HTTPS = External references : http://www.novell.com/support/viewContent.do?externalId=3829452&sliceId=...
