Novell eDirectory LDAP Extended Request Buffer Overflow Vulnerability
Last Update Date:
28 Jan 2011
Release Date:
26 Mar 2008
5593
Views
RISK: Medium Risk
A vulnerability has been identified in Novell eDirectory, which could be exploited by remote attackers to cause a denial of service or compromise a vulnerable system. This issue is caused by a buffer overflow error when processing overly large LDAP Extended Request messages, which could be exploited by remote attackers to crash an affected application or execute arbitrary code.
Impact
- Denial of Service
- Remote Code Execution
System / Technologies affected
- Novell eDirectory 8.x
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- Update to version 8.8.2 or apply eDirectory 8.7.3 sp10.
http://download.novell.com/
Vulnerability Identifier
Source
Related Link
Share with