Novell eDirectory iMonitor HTTP redirection buffer overflow

Added: 10/26/2006 CVE: CVE-2006-5478 BID: 20655 OSVDB: 29993 Background iMonitor is a web service which is a component of Novell eDirectory. Problem iMonitor allows remote command execution by sending specially crafted HTTP header data in a request for certain URLs, which results in a buffer...

Novell eDirectory/iMonitor HTTPSTK栈缓冲区溢出漏洞

Novell eDirectory是一个的跨平台的目录服务器。 Novell eDirectory在处理用户请求构造回应时存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 Novell的HTTP协议栈（httpstk）没有检查客户端所提供的HTTP Host请求头（如Host: www.host.com）的值。当服务器在准备HTTP重新定向响应调用snprintf时可能会触发这个漏洞，导致以加载httpstk库进程的权限执行任意指令。C++伪代码如下： define HTTPHDRHOSTFIELD 211 char szHttp = "HTTP"; char...

CVE-2006-4177

Heap-based buffer overflow in the NCP engine in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted NCP over IP packet that causes NCP to read more data than intended...

CVE-2006-5478

Multiple stack-based buffer overflows in Novell eDirectory 8.8.x before 8.8.1 FTF1, and 8.x up to 8.7.3.8, and Novell NetMail before 3.52e FTF2, allow remote attackers to execute arbitrary code via 1 a long HTTP Host header, which triggers an overflow in the BuildRedirectURL function; or vectors...

CVE-2006-5479

The NCP Engine in Novell eDirectory before 8.7.3.8 FTF1 allows remote attackers to cause an unspecified denial of service via a certain "NCP Fragment."...

CVE-2006-5479

The NCP Engine in Novell eDirectory before 8.7.3.8 FTF1 allows remote attackers to cause an unspecified denial of service via a certain "NCP Fragment."...

CVE-2006-5479

The CVE-2006-5479 entry affects Novell eDirectory’s NCP Engine prior to 8.7.3.8 FTF1, where the NCP Fragment handling is vulnerable. This allows remote attackers to trigger a denial-of-service condition. The available documents state the impact as an unspecified DoS and do not provide exploit det...

CVE-2006-4177

Heap-based buffer overflow in the NCP engine in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted NCP over IP packet that causes NCP to read more data than intended...

CVE-2006-4177

CVE-2006-4177 affects Novell eDirectory’s NCP engine. The issue is a heap-based buffer overflow triggered by a crafted NCP over IP packet, causing NCP to read more data than intended and allowing remote code execution. Affected software is Novell eDirectory prior to 8.8.1 FTF1; the vendor’s remed...

CVE-2006-5478

Multiple stack-based buffer overflows in Novell eDirectory 8.8.x before 8.8.1 FTF1, and 8.x up to 8.7.3.8, and Novell NetMail before 3.52e FTF2, allow remote attackers to execute arbitrary code via 1 a long HTTP Host header, which triggers an overflow in the BuildRedirectURL function; or vectors...

CVE-2006-5478

CVE-2006-5478 describes multiple stack-based buffer overflows in Novell eDirectory, affecting 8.8.x (up to 8.8.1 FTF1) and 8.x prior, plus Novell NetMail

CVE-2006-4510

The evtFilteredMonitorEventsRequest function in the LDAP service in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted request containing a value that is larger than the number of objects transmitted, which triggers an invalid free of unallocated...

CVE-2006-4509

Integer overflow in the evtFilteredMonitorEventsRequest function in the LDAP service in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted request...

CVE-2006-4510

The CVE-2006-4510 issue affects Novell eDirectory’s LDAP service, specifically the evtFilteredMonitorEventsRequest function. A crafted request that provides a value larger than the number of objects transmitted triggers an invalid free of unallocated memory, enabling remote code execution. The vu...

CVE-2006-4510

The evtFilteredMonitorEventsRequest function in the LDAP service in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted request containing a value that is larger than the number of objects transmitted, which triggers an invalid free of unallocated...

CVE-2006-4509

Integer overflow in the evtFilteredMonitorEventsRequest function in the LDAP service in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted request...

CVE-2006-4509

CVE-2006-4509: A heap/integer overflow in the evtFilteredMonitorEventsRequest handler of the Novell eDirectory LDAP service (before 8.8.1 FTF1) can be triggered by crafted input, potentially allowing remote code execution. Public advisories describe the overflow during memory allocation (multipli...

Immunity Canvas: EDIRECTORY_HTTP

Name| edirectoryhttp ---|--- CVE| CVE-2006-5478 Exploit Pack| CANVAS Description| Novell eDirectory HttpStk.dlm Overflow Notes| References: http://www.mnin.org/advisories/2006novellhttpstk.pdf CVE Name: CVE-2006-5478 VENDOR: Novell Notes: Repeatability: Date public: 10/20/2006 CERT Advisory: CVE...

iDefense Security Advisory 10.21.06: Novell eDirectory evtFilteredMonitorEventsRequest Invalid Free Vulnerability

Novell eDirectory evtFilteredMonitorEventsRequest Invalid Free Vulnerability iDefense Security Advisory 10.21.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 21, 2006 I. BACKGROUND Novell eDirectory is a cross-platform lightweight directory access protocol LDAP server. More informati...

iDefense Security Advisory 10.21.06: Novell eDirectory NCP over IP length Heap Overflow VulnerabilityiDefense Security Advisory 10.21.06: Novell eDirectory NCP over IP length Heap Overflow Vulnerability

Novell eDirectory NCP over IP length Heap Overflow Vulnerability iDefense Security Advisory 10.21.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 21, 2006 I. BACKGROUND Novell eDirectory is a cross-platform lightweight directory access protocol LDAP server. In addition to LDAP,...