PT-2012-2561 · Netiq · Netiq Edirectory

Published 2012-12-25 · Updated 2021-04-13 · CVE-2012-0432

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NetIQ eDirectory version 8.8.7.x before 8.8.7.2

Description A stack-based buffer overflow issue exists in the Novell NCP implementation, allowing remote attackers to have an unspecified impact. The exact vectors used for the attack are unknown.

Recommendations For versions prior to 8.8.7.2, update to version 8.8.7.2 or later to resolve the issue.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2012-0432

Affected Products

Netiq Edirectory

References · 6

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/novell_edirectory_ncp_bof.rb · Exploit
• 🔥 https://exploit-db.com/exploits/24205 · Exploit
• 🔥 https://exploit-db.com/exploits/24323 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-0432 · Security Note
• https://bugzilla.novell.com/show_bug.cgi?id=785272 · Note
• http://novell.com/support/kb/doc.php?id=3426981 · Note