CVE-2008-0924

Stack-based buffer overflow in the DoLBURPRequest function in libnldap in ndsd in Novell eDirectory 8.7.3.9 and earlier, and 8.8.1 and earlier in the 8.8.x series, allows remote attackers to cause a denial of service daemon crash or CPU consumption or execute arbitrary code via a long delRequest...

CVE-2008-0926

The SOAP interface to the eMBox module in Novell eDirectory 8.7.3.9 and earlier, and 8.8.x before 8.8.2, relies on client-side authentication, which allows remote attackers to bypass authentication via requests for /SOAP URIs, and cause a denial of service daemon shutdown or read arbitrary files...

Authentication flaw

The SOAP interface to the eMBox module in Novell eDirectory 8.7.3.9 and earlier, and 8.8.x before 8.8.2, relies on client-side authentication, which allows remote attackers to bypass authentication via requests for /SOAP URIs, and cause a denial of service daemon shutdown or read arbitrary files...

CVE-2008-0924

The CVE-2008-0924 issue affects Novell eDirectory (Linux and possibly others) where a stack-based buffer overflow in the DoLBURPRequest path of libnldap/ndsd is triggered by a long delRequest LDAP Extended Request, likely involving a long DN. Affected versions are eDirectory 8.7.3.9 and earlier, ...

CVE-2008-0926

The SOAP interface to the eMBox module in Novell eDirectory 8.7.3.9 and earlier, and 8.8.x before 8.8.2, relies on client-side authentication, which allows remote attackers to bypass authentication via requests for /SOAP URIs, and cause a denial of service daemon shutdown or read arbitrary files...

CVE-2008-0924

Stack-based buffer overflow in the DoLBURPRequest function in libnldap in ndsd in Novell eDirectory 8.7.3.9 and earlier, and 8.8.1 and earlier in the 8.8.x series, allows remote attackers to cause a denial of service daemon crash or CPU consumption or execute arbitrary code via a long delRequest...

CVE-2008-0926

CVE-2008-0926 affects Novell eDirectory’s eMBox SOAP interface, where client-side authentication can be bypassed via requests to /SOAP URIs. This enables either read access to files or a denial of service (daemon shutdown). Affected products include eDirectory 8.7.3.9 and earlier, and 8.8.x befor...

Novell eDirectory buffer overflow

Buffer overflow on oversized LDAP delRequest...

Novell eDirectory LDAP扩展请求消息栈溢出漏洞

BUGTRAQ ID: 28434 CVECAN ID: CVE-2008-0924 Novell eDirectory是一个的跨平台的目录服务器。 Novell eDirectory处理畸形的请求数据时存在缓冲区溢出漏洞，如果向Novell eDirectory服务器发送了超长的LDAP扩展请求消息的话，就可能触发栈溢出，导致执行任意指令。 Novell eDirectory = 8.8.1 Novell eDirectory = 8.7.3.9 Novell ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Novell eDirectory for Linux LDAP delRequest Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell eDirectory for Linux. Authentication is not required to exploit this vulnerability. The specific flaw exists in the libnldap library. When a large LDAP delRequest message is sent, a stack...

ZDI-08-013: Novell eDirectory for Linux Stack Overflow

ZDI-08-013: Novell eDirectory for Linux Stack Overflow http://www.zerodayinitiative.com/advisories/ZDI-08-013 March 26, 2008 -- CVE ID: CVE-2008-0924 -- Affected Vendors: Novell -- Affected Products: Novell eDirectory -- TippingPointTM IPS Customer Protection: TippingPoint IPS customers have been...

Novell eDirectory 8.x - eMBox Utility edirutil Command

Novell eDirectory 8.x - eMBox Utility edirutil Command source: https://www.securityfocus.com/bid/28441/info Novell eDirectory is prone to an unspecified vulnerability that can result in unauthorized file access or a denial of service. Unauthenticated attackers can exploit this issue. This issue...

Novell eDirectory 8.x - eMBox Utility 'edirutil' Command

source: https://www.securityfocus.com/bid/28441/info Novell eDirectory is prone to an unspecified vulnerability that can result in unauthorized file access or a denial of service. Unauthenticated attackers can exploit this issue. This issue affects eDirectory 8.8 and earlier as well as 8.7.3.9 an...

Novell eDirectory 8.8 Long URI iMonitor Buffer Overflow Exploit (meta)

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...

SuSE 10 Security Update : LUM (ZYPP Patch Number 2274)

A security problem was fixed in 'novell-lum', the eDirectory based 'Linux User Management'. Under certain circumstances it was possible to login to the console without any password. ssh is not affected, since it rejects empty passwords. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The tex...

Design/Logic Flaw

HP System Management Homepage SMH before 2.1.9 for Linux, when used with Novell eDirectory, assigns the eDirectory members to the root group, which allows remote authenticated eDirectory users to gain privileges...

CVE-2007-3260

HP System Management Homepage SMH before 2.1.9 for Linux, when used with Novell eDirectory, assigns the eDirectory members to the root group, which allows remote authenticated eDirectory users to gain privileges...

CVE-2007-3260

The CVE-2007-3260 issue affects HP System Management Homepage (SMH) for Linux prior to version 2.1.9 when used with Novell eDirectory. The vulnerability arises from a misconfiguration where eDirectory members are assigned to the root group, enabling remote authenticated eDirectory users to gain p...

CVE-2007-3260

HP System Management Homepage SMH before 2.1.9 for Linux, when used with Novell eDirectory, assigns the eDirectory members to the root group, which allows remote authenticated eDirectory users to gain privileges...

CVE-2006-4520

ncp in Novell eDirectory before 8.7.3 SP9, and 8.8.x before 8.8.1 FTF2, does not properly handle NCP fragments with a negative length, which allows remote attackers to cause a denial of service daemon crash when the heap is written to a log file...