CVE-2006-4520

ncp in Novell eDirectory before 8.7.3 SP9, and 8.8.x before 8.8.1 FTF2, does not properly handle NCP fragments with a negative length, which allows remote attackers to cause a denial of service daemon crash when the heap is written to a log file...

CVE-2006-4520

CVE-2006-4520 affects Novell eDirectory’s NCP handling. Vulnerable products include eDirectory versions 8.7.3 SP9 and 8.8.x prior to 8.8.1 FTF2; the issue lies in processing NCP fragments with a negative length. Remote, unauthenticated attackers can trigger a denial of service by causing the heap...

Novell eDirectory NCP碎片长度拒绝服务漏洞

Novell eDirectory是一个的跨平台的目录服务器。 eDirectory产品的NCP功能在处理畸形的碎片请求时存在处理漏洞，远程攻击者可能利用此漏洞导致服务进程崩溃。 eDirectory产品的NCP功能如果收到了特制的输入，eDirectory会向其错误日志报告接受到了有无效长度的碎片，错误消息中包含16进制的碎片内容。但如果长度为负数的话，eDirectory就有可能将数据dump到日志中，导致将大量数据保存到日志。一旦到达了堆的末尾，就会触发内存破坏，服务进程会崩溃。 Novell eDirectory = 8.7.3.8 Novell eDirectory 8.8.1...

Novell eDirectory NCP over IP DoS

Malformed fragmented request causes service to crash...

iDefense Security Advisory 04.26.07: Novell eDirectory NCP Fragment Denial of Service Vulnerability

Novell eDirectory NCP Fragment Denial of Service Vulnerability iDefense Security Advisory 04.26.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 26, 2007 I. BACKGROUND Novell eDirectory is a cross-platform lightweight directory access protocol LDAP server. In addition to LDAP,...

Update Protection against Novell eDirectory Denial of Service Vulnerability

Novell eDirectory server is vulnerable to a denial of service DoS condition. Novell eDirectory is a set of services based on the Lightweight Directory Access Protocol LDAP. The vulnerability can be exploited by remote attackers to crash the service or execute code via a specially crafted LDAP...

Update Protection against Novell eDirectory 'evtFilteredMonitorEventsRequest' Vulnerability

A remote code execution has been detected in the LDAP service of Novell eDirectory. Novell's eDirectory is a directory service software product for centrally managing access to resources on multiple servers and computers within a network. A remote attacker can exploit this vulnerability to execut...

CVE-2006-5813

Unspecified vulnerability in Novell eDirectory 8.8 allows attackers to cause a denial of service, as demonstrated by vdnovell3.pm, a "Novell eDirectory 8.8 DoS." NOTE: As of 20061108, this disclosure has no actionable information. However, since it is from a reliable researcher, it is being...

CVE-2006-5814

Unspecified vulnerability in Novell eDirectory allows remote attackers to execute arbitrary code, as demonstrated by vdnovell.pm, a "Novell eDirectory remote exploit." NOTE: As of 20061108, this disclosure has no actionable information. However, since it is from a reliable researcher, it is being...

CVE-2006-5814

Technical details for CVE-2006-5814 are not publicly available in the provided documents. No concrete information on affected versions, root cause, or remediation is present. Monitor for updates.

CVE-2006-5813

Unspecified vulnerability in Novell eDirectory 8.8 allows attackers to cause a denial of service, as demonstrated by vdnovell3.pm, a "Novell eDirectory 8.8 DoS." NOTE: As of 20061108, this disclosure has no actionable information. However, since it is from a reliable researcher, it is being...

CVE-2006-5813

CVE-2006-5813 concerns Novell eDirectory 8.8 with a denial-of-service condition reported by a reliable researcher; the public disclosure provides no actionable technical details, and the exact root cause, affected components, vulnerable versions beyond “eDirectory 8.8,” exploits, or remediation a...

CVE-2006-5814

Unspecified vulnerability in Novell eDirectory allows remote attackers to execute arbitrary code, as demonstrated by vdnovell.pm, a "Novell eDirectory remote exploit." NOTE: As of 20061108, this disclosure has no actionable information. However, since it is from a reliable researcher, it is being...

ZDI-06-036: Novell Netmail User Authentication Buffer Overflow Vulnerability

ZDI-06-036: Novell Netmail User Authentication Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-036.html October 31, 2006 -- CVE ID: CVE-2006-5478 -- Affected Vendor: Novell -- Affected Products: Netmail 3.5.2 Novell eDirectory 8.8.1 -- TippingPointTM IPS Customer...

CVE-2006-4521

The BerDecodeLoginDataRequest function in the libnmasldap.so NMAS module in Novell eDirectory 8.8 and 8.8.1 before the Security Services 2.0.3 patch does not properly increment a pointer when handling certain input, which allows remote attackers to cause a denial of service invalid memory access...

CVE-2006-4521

The BerDecodeLoginDataRequest function in the libnmasldap.so NMAS module in Novell eDirectory 8.8 and 8.8.1 before the Security Services 2.0.3 patch does not properly increment a pointer when handling certain input, which allows remote attackers to cause a denial of service invalid memory access...

CVE-2006-4521

CVE-2006-4521 affects Novell eDirectory (versions 8.8 and 8.8.1) via the libnmasldap.so NMAS module. The BerDecodeLoginDataRequest function does not properly increment a pointer when handling certain input, allowing a remote attacker to cause a denial of service (invalid memory access) with a cra...

iDefense Security Advisory 10.27.06: Novell eDirectory NMAS BerDecodeLoginDataRequeset DoS Vulnerability

Novell eDirectory NMAS BerDecodeLoginDataRequeset DoS Vulnerability iDefense Security Advisory 10.27.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 27, 2006 I. BACKGROUND Novell eDirectory is a cross-platform lightweight directory access protocol LDAP server. Additionally, eDirector...

Novell eDirectory DoS

Service crash on malformed login request...

Novell eDirectory <= 9.0 DHost Remote Buffer Overflow Exploit

No description provided by source. / . \ \ \ \ | | / | | | | \ / / /\ \ / \ | | \ / | |/ | |/ / \ / \ | / \ // | Y / ^ /\ | //\ \ /| / / || /\ | \ | \ / / / / 30\10\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet...