PT-2012-2561 · Netiq · Netiq Edirectory

Publicado 2012-12-25 · Atualizado 2021-04-13 · CVE-2012-0432

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NetIQ eDirectory version 8.8.7.x before 8.8.7.2

Description A stack-based buffer overflow issue exists in the Novell NCP implementation, allowing remote attackers to have an unspecified impact. The exact vectors used for the attack are unknown.

Recommendations For versions prior to 8.8.7.2, update to version 8.8.7.2 or later to resolve the issue.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2012-0432

Produtos afetados

Netiq Edirectory

Referências · 6

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/novell_edirectory_ncp_bof.rb · Exploit
• 🔥 https://exploit-db.com/exploits/24205 · Exploit
• 🔥 https://exploit-db.com/exploits/24323 · Exploit
• https://bugzilla.novell.com/show_bug.cgi?id=785272 · Nota
• http://novell.com/support/kb/doc.php?id=3426981 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-0432 · Nota de Segurança