ZDI-10-189: Novell eDirectory Server Malformed Index Denial of Service Vulnerability

ZDI-10-189: Novell eDirectory Server Malformed Index Denial of Service Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-189 October 1, 2010 -- CVSS: 7.8, AV:N/AC:L/Au:N/C:N/I:N/A:C -- Affected Vendors: Novell -- Affected Products: Novell eDirectory -- TippingPointTM IPS Customer...

Novell eDirectory Server Malformed Index Denial of Service Vulnerability

This vulnerability allows attackers to deny services on vulnerable installations of Novell eDirectory. Authentication is not required in order to trigger this vulnerability. The flaw exists within Novell's eDirectory Server's NCP implementation which binds, by default, to TCP port 524. While...