PT-2006-5316 · Novell · Libnmasldap.So+1

Publicado 2006-11-04 · Atualizado 2017-07-20 · CVE-2006-4521

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Novell eDirectory versions 8.8 through 8.8.1

Description The issue is related to the BerDecodeLoginDataRequest function in the libnmasldap.so NMAS module, which does not properly handle certain input. This can be exploited by remote attackers to cause a denial of service through a crafted login request, resulting in invalid memory access.

Recommendations For Novell eDirectory versions 8.8 through 8.8.1, apply the Security Services 2.0.3 patch to resolve the issue.

Correção

Identificadores relacionados

CVE-2006-4521

Produtos afetados

Novell Edirectory

Libnmasldap.So

Referências · 7

• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=437 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29963 · Nota
• http://securitytracker.com/id?1017140 · Correção
• http://vupen.com/english/advisories/2006/4293 · Nota
• http://securityfocus.com/bid/20842 · Nota
• http://secunia.com/advisories/22660 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-4521 · Nota de Segurança