EUVD-2013-3640

Malware in sbrugna...

SUSE CVE-2013-3707

The HTTPSTK service in the novell-nrm package before 2.0.2-297.305.302.3 in Novell Open Enterprise Server 2 OES 2 Linux, and OES 11 Linux Gold and SP1, does not make the intended SSLfree and SSLshutdown calls for the close of a TCP connection, which allows remote attackers to cause a denial of...

Novell eDirectory 8.x iMonitor HTTPSTK Buffer Overflow Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/20655/info The Novell eDirectory server iMonitor is prone to a stack-based buffer-overflow vulnerability because it fails to perform sufficient bounds checking on client-supplied data before copying it to a buffer. An...

Novell eDirectory 8.x iMonitor HTTPSTK Buffer Overflow Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/20655/info The Novell eDirectory server iMonitor is prone to a stack-based buffer-overflow vulnerability because it fails to perform sufficient bounds checking on client-supplied data before copying it to a buffer. An...

Novell Open Enterprise Server HTTPSTK Denial of Service (CVE-2013-3707)

A denial of service vulnerability exists in the HTTPSTK service in Novell Open Enterprise Server. The vulnerability is because the HTTPSTK service does not close TCP connections properly after a TCP handshake. A remote unauthenticated attacker can exploit this vulnerability by creating several...

CVE-2013-3707

The HTTPSTK service in the novell-nrm package before 2.0.2-297.305.302.3 in Novell Open Enterprise Server 2 OES 2 Linux, and OES 11 Linux Gold and SP1, does not make the intended SSLfree and SSLshutdown calls for the close of a TCP connection, which allows remote attackers to cause a denial of...

Design/Logic Flaw

The HTTPSTK service in the novell-nrm package before 2.0.2-297.305.302.3 in Novell Open Enterprise Server 2 OES 2 Linux, and OES 11 Linux Gold and SP1, does not make the intended SSLfree and SSLshutdown calls for the close of a TCP connection, which allows remote attackers to cause a denial of...

CVE-2013-3707

The HTTPSTK service in the novell-nrm package before 2.0.2-297.305.302.3 in Novell Open Enterprise Server 2 OES 2 Linux, and OES 11 Linux Gold and SP1, does not make the intended SSLfree and SSLshutdown calls for the close of a TCP connection, which allows remote attackers to cause a denial of...

CVE-2013-3707

CVE-2013-3707 affects the HTTPSTK service in the Novell Open Enterprise Server (OES) 2 Linux and OES 11 Linux Gold/SP1 releases via the novell-nrm package. The root cause is that the HTTPSTK component does not perform the intended SSL_free and SSL_shutdown on TCP connection close, enabling a remo...

Novell eDirectory dhost HTTPSTK Buffer Overflow

Novell eDirectory is a Lightweight Directory Access Protocol LDAP server, intended for use as part of an identity management solution. A code execution vulnerability exists in Novell eDirectory. The vulnerability is due to lack of boundary validation when handling HTTP requests to the HTTPSTK for...

Novell eDirectory DHost HTTPSTK buffer overflow

Added: 11/23/2009 BID: 37042 Background Novell eDirectory is a directory server which implements the LDAP protocol. eDirectory for Windows, Linux, and UNIX includes the DHost program, which runs under eDirectory and provides the functionality of the NetWare operating system. Problem A buffer...

Novell eDirectory DHost HTTPSTK buffer overflow

Added: 11/23/2009 BID: 37042 Background Novell eDirectory is a directory server which implements the LDAP protocol. eDirectory for Windows, Linux, and UNIX includes the DHost program, which runs under eDirectory and provides the functionality of the NetWare operating system. Problem A buffer...

Novell eDirectory DHost HTTPSTK buffer overflow

Added: 11/23/2009 BID: 37042 Background Novell eDirectory is a directory server which implements the LDAP protocol. eDirectory for Windows, Linux, and UNIX includes the DHost program, which runs under eDirectory and provides the functionality of the NetWare operating system. Problem A buffer...

Novell eDirectory DHost HTTPSTK buffer overflow

Added: 11/23/2009 BID: 37042 Background Novell eDirectory is a directory server which implements the LDAP protocol. eDirectory for Windows, Linux, and UNIX includes the DHost program, which runs under eDirectory and provides the functionality of the NetWare operating system. Problem A buffer...

Novell eDirectory 8.8 SP5 HTTPSTK Stack Overflow

!usr\bin\perl Novell eDirectory 8.8 SP5 HTTPSTK BoF Vuln - 0day Vulnerability found in Hellcode Labs. karak0rsan || murderkey infoathellcode.net || www.hellcode.net use WWW::Mechanize; use LWP::Debug qw+; use HTTP::Cookies; use HTTP::Request::Common;; $target=$ARGV0; if!$ARGV0 print "Novell...

Hellcode Research: Novell eDirectory HTTPSTK Login Stack Overflow Vulnerability

Vendor: Novell Product: eDirectory for Windows Version: 8.8 SP5 Vulnerability: Stack Overflow Description: Vulnerability is in "/dhost/httpstk" This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell eDirectory. The specific flaw exists in the...

Novell eDirectory HTTPSTK Login Stack Overflow Vulnerability

Exploit for unknown platform in category dos / poc ============================================================ Novell eDirectory HTTPSTK Login Stack Overflow Vulnerability ============================================================ Title: Novell eDirectory HTTPSTK Login Stack Overflow...

Novell eDirectory - HTTPSTK Login Stack Overflow

Exploit Title: Novell eDirectory HTTPSTK Login Stack Overflow Vulnerability Date: 2009-11-17 Author: karak0rsan Software Link: downoad link if available Version: Novell eDirectory 8.8 SP5 HTTPSTK Tested on: relevant os Code : exploit code !usr\bin\perl Novell eDirectory 8.8 SP5 HTTPSTK BoF Vuln -...

Novell eDirectory HTTPSTK Login Stack Overflow Vulnerability

No description provided by source. Exploit Title: Novell eDirectory HTTPSTK Login Stack Overflow Vulnerability Date: 2009-11-17 Author: karak0rsan Software Link: downoad link if available Version: Novell eDirectory 8.8 SP5 HTTPSTK Tested on: relevant os Code : exploit code !usr\bin\perl Novell...

Novell eDirectory - HTTPSTK Login Stack Overflow

Novell eDirectory - HTTPSTK Login Stack Overflow Exploit Title: Novell eDirectory HTTPSTK Login Stack Overflow Vulnerability Date: 2009-11-17 Author: karak0rsan Software Link: downoad link if available Version: Novell eDirectory 8.8 SP5 HTTPSTK Tested on: relevant os Code : exploit code...