PT-2006-5316 · Novell · Libnmasldap.So+1

Published 2006-11-04 · Updated 2017-07-20 · CVE-2006-4521

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Novell eDirectory versions 8.8 through 8.8.1

Description The issue is related to the BerDecodeLoginDataRequest function in the libnmasldap.so NMAS module, which does not properly handle certain input. This can be exploited by remote attackers to cause a denial of service through a crafted login request, resulting in invalid memory access.

Recommendations For Novell eDirectory versions 8.8 through 8.8.1, apply the Security Services 2.0.3 patch to resolve the issue.

Fix

Related Identifiers

CVE-2006-4521

Affected Products

Novell Edirectory

Libnmasldap.So

References · 7

• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=437 · Vendor Advisory
• http://securitytracker.com/id?1017140 · Patch
• http://secunia.com/advisories/22660 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-4521 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29963 · Note
• http://vupen.com/english/advisories/2006/4293 · Note
• http://securityfocus.com/bid/20842 · Note