741 matches found
CVE-2007-3260
The CVE-2007-3260 issue affects HP System Management Homepage (SMH) for Linux prior to version 2.1.9 when used with Novell eDirectory. The vulnerability arises from a misconfiguration where eDirectory members are assigned to the root group, enabling remote authenticated eDirectory users to gain p...
CVE-2006-4520
ncp in Novell eDirectory before 8.7.3 SP9, and 8.8.x before 8.8.1 FTF2, does not properly handle NCP fragments with a negative length, which allows remote attackers to cause a denial of service daemon crash when the heap is written to a log file...
CVE-2006-4520
ncp in Novell eDirectory before 8.7.3 SP9, and 8.8.x before 8.8.1 FTF2, does not properly handle NCP fragments with a negative length, which allows remote attackers to cause a denial of service daemon crash when the heap is written to a log file...
CVE-2006-4520
CVE-2006-4520 affects Novell eDirectory’s NCP handling. Vulnerable products include eDirectory versions 8.7.3 SP9 and 8.8.x prior to 8.8.1 FTF2; the issue lies in processing NCP fragments with a negative length. Remote, unauthenticated attackers can trigger a denial of service by causing the heap...
Novell eDirectory NCP over IP DoS
Malformed fragmented request causes service to crash...
iDefense Security Advisory 04.26.07: Novell eDirectory NCP Fragment Denial of Service Vulnerability
Novell eDirectory NCP Fragment Denial of Service Vulnerability iDefense Security Advisory 04.26.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 26, 2007 I. BACKGROUND Novell eDirectory is a cross-platform lightweight directory access protocol LDAP server. In addition to LDAP,...
Novell eDirectory NCP碎片长度拒绝服务漏洞
Novell eDirectory是一个的跨平台的目录服务器。 eDirectory产品的NCP功能在处理畸形的碎片请求时存在处理漏洞，远程攻击者可能利用此漏洞导致服务进程崩溃。 eDirectory产品的NCP功能如果收到了特制的输入，eDirectory会向其错误日志报告接受到了有无效长度的碎片，错误消息中包含16进制的碎片内容。但如果长度为负数的话，eDirectory就有可能将数据dump到日志中，导致将大量数据保存到日志。一旦到达了堆的末尾，就会触发内存破坏，服务进程会崩溃。 Novell eDirectory = 8.7.3.8 Novell eDirectory 8.8.1...
Update Protection against Novell eDirectory Denial of Service Vulnerability
Novell eDirectory server is vulnerable to a denial of service DoS condition. Novell eDirectory is a set of services based on the Lightweight Directory Access Protocol LDAP. The vulnerability can be exploited by remote attackers to crash the service or execute code via a specially crafted LDAP...
Update Protection against Novell eDirectory 'evtFilteredMonitorEventsRequest' Vulnerability
A remote code execution has been detected in the LDAP service of Novell eDirectory. Novell's eDirectory is a directory service software product for centrally managing access to resources on multiple servers and computers within a network. A remote attacker can exploit this vulnerability to execut...
CVE-2006-5813
Unspecified vulnerability in Novell eDirectory 8.8 allows attackers to cause a denial of service, as demonstrated by vdnovell3.pm, a "Novell eDirectory 8.8 DoS." NOTE: As of 20061108, this disclosure has no actionable information. However, since it is from a reliable researcher, it is being...
CVE-2006-5814
Unspecified vulnerability in Novell eDirectory allows remote attackers to execute arbitrary code, as demonstrated by vdnovell.pm, a "Novell eDirectory remote exploit." NOTE: As of 20061108, this disclosure has no actionable information. However, since it is from a reliable researcher, it is being...
CVE-2006-5814
Unspecified vulnerability in Novell eDirectory allows remote attackers to execute arbitrary code, as demonstrated by vdnovell.pm, a "Novell eDirectory remote exploit." NOTE: As of 20061108, this disclosure has no actionable information. However, since it is from a reliable researcher, it is being...
CVE-2006-5813
CVE-2006-5813 concerns Novell eDirectory 8.8 with a denial-of-service condition reported by a reliable researcher; the public disclosure provides no actionable technical details, and the exact root cause, affected components, vulnerable versions beyond “eDirectory 8.8,” exploits, or remediation a...
CVE-2006-5813
Unspecified vulnerability in Novell eDirectory 8.8 allows attackers to cause a denial of service, as demonstrated by vdnovell3.pm, a "Novell eDirectory 8.8 DoS." NOTE: As of 20061108, this disclosure has no actionable information. However, since it is from a reliable researcher, it is being...
CVE-2006-5814
Technical details for CVE-2006-5814 are not publicly available in the provided documents. No concrete information on affected versions, root cause, or remediation is present. Monitor for updates.
ZDI-06-036: Novell Netmail User Authentication Buffer Overflow Vulnerability
ZDI-06-036: Novell Netmail User Authentication Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-036.html October 31, 2006 -- CVE ID: CVE-2006-5478 -- Affected Vendor: Novell -- Affected Products: Netmail 3.5.2 Novell eDirectory 8.8.1 -- TippingPointTM IPS Customer...
CVE-2006-4521
The BerDecodeLoginDataRequest function in the libnmasldap.so NMAS module in Novell eDirectory 8.8 and 8.8.1 before the Security Services 2.0.3 patch does not properly increment a pointer when handling certain input, which allows remote attackers to cause a denial of service invalid memory access...
CVE-2006-4521
The BerDecodeLoginDataRequest function in the libnmasldap.so NMAS module in Novell eDirectory 8.8 and 8.8.1 before the Security Services 2.0.3 patch does not properly increment a pointer when handling certain input, which allows remote attackers to cause a denial of service invalid memory access...
CVE-2006-4521
CVE-2006-4521 affects Novell eDirectory (versions 8.8 and 8.8.1) via the libnmasldap.so NMAS module. The BerDecodeLoginDataRequest function does not properly increment a pointer when handling certain input, allowing a remote attacker to cause a denial of service (invalid memory access) with a cra...