novell edirectory 8.8.5 vulnerabilities and exploits

(subscribe to this query)

10

CVSSv2

Integer overflow in Novell eDirectory 8.7.3.x prior to 8.7.3.10 ftf2 and 8.8.x prior to 8.8.5.2 allows remote malicious users to execute arbitrary code via an NDS Verb 0x1 request containing a large integer value that triggers a heap-based buffer overflow.

Novell Edirectory 8.7.3 Novell Edirectory 8.8 Novell Edirectory 8.7.3.10 Novell Edirectory 8.7.3.8 Novell Edirectory 8.8.5 Novell Edirectory 8.8.1 Novell Edirectory 8.8.2 Novell Edirectory 8.7.3.9

7.5

CVSSv2

The dhost web service in Novell eDirectory 8.8.5 uses a predictable session cookie, which makes it easier for remote malicious users to hijack sessions via a modified cookie.

Novell Edirectory 8.8.5

1 EDB exploit

5

CVSSv2

Unspecified vulnerability in the NCP service in Novell eDirectory 8.8.5 prior to 8.8.5.6 and 8.8.6 prior to 8.8.6.2 allows remote malicious users to cause a denial of service (hang) via a malformed FileSetLock request to port 524.

Novell Edirectory 8.8.6 Novell Edirectory 8.8.5

5

CVSSv2

The NDSD process in Novell eDirectory 8.7.3 prior to 8.7.3.10 ftf2 and eDirectory 8.8 prior to 8.8.5 ftf1 does not properly handle certain LDAP search requests, which allows remote malicious users to cause a denial of service (application hang) via a search request with a NULL Ba...

Novell Edirectory 8.7.3 Novell Edirectory 8.8 Novell Edirectory 8.8.1 Novell Edirectory 8.8.2 Novell Edirectory 8.7.3.8 Novell Edirectory 8.7.3.9

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook