medium5.0
CVE-2006-4521
The BerDecodeLoginDataRequest function in the libnmasldap.so NMAS module in Novell eDirectory 8.8 and 8.8.1 before the Security Services 2.0.3 patch does not p…
Impact
The BerDecodeLoginDataRequest function in the libnmasldap.so NMAS module in Novell eDirectory 8.8 and 8.8.1 before the Security Services 2.0.3 patch does not properly increment a pointer when handling certain input, which allows remote attackers to cause a denial of service (invalid memory access) via a crafted login request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Novell | Edirectory | Versions 8.8, 8.8.1 |
References
- NVD record
- CVE.org record
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=437
- http://secunia.com/advisories/22660
- http://securitytracker.com/id?1017140
- http://www.securityfocus.com/bid/20842
- http://www.vupen.com/english/advisories/2006/4293
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29963
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=437
- http://secunia.com/advisories/22660
- http://securitytracker.com/id?1017140
- http://www.securityfocus.com/bid/20842
- http://www.vupen.com/english/advisories/2006/4293
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29963