iDefense Security Advisory 10.21.06: Novell eDirectory evtFilteredMonitorEventsRequest Heap Overflow Vulnerability

Novell eDirectory evtFilteredMonitorEventsRequest Heap Overflow Vulnerability iDefense Security Advisory 10.21.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 21, 2006 I. BACKGROUND Novell eDirectory is a cross-platform lightweight directory access protocol LDAP server. More...

Novell eDirectory iMonitor HTTP Protocol Stack (httpstk) Host HTTP Header Remote Overflow

The installed version of Novell eDirectory on the remote host reportedly contains a buffer overflow that can be triggered with a specially crafted Host request header. An anonymous remote attacker may be able to leverage this flaw to execute code on the affected host, generally with super-user...

Novell eDirectory 8.x - iMonitor HTTPSTK Buffer Overflow (1)

Novell eDirectory 8.x - iMonitor HTTPSTK Buffer Overflow 1 source: https://www.securityfocus.com/bid/20655/info The Novell eDirectory server iMonitor is prone to a stack-based buffer-overflow vulnerability because it fails to perform sufficient bounds checking on client-supplied data before copyi...

Novell eDirectory 8.x - iMonitor HTTPSTK Buffer Overflow (1)

source: https://www.securityfocus.com/bid/20655/info The Novell eDirectory server iMonitor is prone to a stack-based buffer-overflow vulnerability because it fails to perform sufficient bounds checking on client-supplied data before copying it to a buffer. An attacker could leverage this issue to...

CVE-2006-4186

The iManager in eMBoxClient.jar in Novell eDirectory 8.7.3.8 writes passwords in plaintext to a log file, which allows local users to obtain passwords by reading the file...

CVE-2006-4185

Unspecified vulnerability in the NCPENGINE in Novell eDirectory 8.7.3.8 allows local users to cause a denial of service CPU consumption via unspecified vectors, as originally demonstrated using a Nessus scan...

[SA21496] Novell eDirectory Denial of Service and Password Exposure

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...

Multiple Novell eDirectory security vulnerabilities

Remote Denial of Service, cleartext password in log files...

CVE-2006-4186

The iManager in eMBoxClient.jar in Novell eDirectory 8.7.3.8 writes passwords in plaintext to a log file, which allows local users to obtain passwords by reading the file...

CVE-2006-4186

The CVE-2006-4186 entry pertains to Novell eDirectory 8.7.3.8 where the iManager in eMBoxClient.jar writes passwords in plaintext to a log file. This creates a local information disclosure risk: local users can read the log file to obtain passwords. The affected component is the iManager inside e...

CVE-2006-4185

The CVE affects Novell eDirectory 8.7.3.8, specifically the NCPENGINE component. A vulnerability in NCPENGINE allows local users to cause a denial of service (CPU consumption) via unspecified vectors, as originally demonstrated by a Nessus scan. The available documents do not specify the root cau...

CVE-2006-4185

Unspecified vulnerability in the NCPENGINE in Novell eDirectory 8.7.3.8 allows local users to cause a denial of service CPU consumption via unspecified vectors, as originally demonstrated using a Nessus scan...

Novell eDirectory 8.8 NDS Server Buffer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell eDirectory. Exploitation does not require authentication. The specific flaw exists within the iMonitor NDS Server, which by default exposes an HTTP interface on TCP port 8028 and an HTTPS...

Preemptive Protection against Novell eDirectory Buffer Overflow Vulnerability

A beffer overflow vulnerability has been identified in Novell eDirectory. By supplying an overly long URI, remote attackers could execute arbitrary code on vulnerable installations of Novell eDirectory...

Novell eDirectory iMonitor NDS buffer overflow

Added: 05/30/2006 CVE: CVE-2006-2496 BID: 18026 OSVDB: 25781 Background iMonitor is a web service which is a component of Novell eDirectory. Problem A buffer overflow in iMonitor allows remote attackers to execute arbitrary commands by sending a long, specially crafted URL request in the NDS...

Novell eDirectory iMonitor NDS buffer overflow

Added: 05/30/2006 CVE: CVE-2006-2496 BID: 18026 OSVDB: 25781 Background iMonitor is a web service which is a component of Novell eDirectory. Problem A buffer overflow in iMonitor allows remote attackers to execute arbitrary commands by sending a long, specially crafted URL request in the NDS...

Novell eDirectory iMonitor NDS buffer overflow

Added: 05/30/2006 CVE: CVE-2006-2496 BID: 18026 OSVDB: 25781 Background iMonitor is a web service which is a component of Novell eDirectory. Problem A buffer overflow in iMonitor allows remote attackers to execute arbitrary commands by sending a long, specially crafted URL request in the NDS...

Novell eDirectory iMonitor NDS buffer overflow

Added: 05/30/2006 CVE: CVE-2006-2496 BID: 18026 OSVDB: 25781 Background iMonitor is a web service which is a component of Novell eDirectory. Problem A buffer overflow in iMonitor allows remote attackers to execute arbitrary commands by sending a long, specially crafted URL request in the NDS...

Novell eDirectory 8.8 Long URI iMonitor Buffer Overflow Exploit (meta)

Exploit for unknown platform in category remote exploits ====================================================================== Novell eDirectory 8.8 Long URI iMonitor Buffer Overflow Exploit meta ====================================================================== This file is part of the...

ZDI-06-016: Novell eDirectory 8.8 NDS Server Buffer Overflow Vulnerability

ZDI-06-016: Novell eDirectory 8.8 NDS Server Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-016.html May 22, 2006 -- CVE ID: CVE-2006-2496 -- Affected Vendor: Novell -- Affected Products: Novell eDirectory 8.8 Novell iMonitor 2.4 -- TippingPointTM IPS Customer...