Lucene search
PRIOn knowledge basePRION:CVE-2008-0924HistoryMar 28, 2008 - 6:44 p.m.
Stack overflow
2008-03-2818:44:00
PRIOn knowledge base
www.prio-n.com
4
Stack-based buffer overflow in the DoLBURPRequest function in libnldap in ndsd in Novell eDirectory 8.7.3.9 and earlier, and 8.8.1 and earlier in the 8.8.x series, allows remote attackers to cause a denial of service (daemon crash or CPU consumption) or execute arbitrary code via a long delRequest LDAP Extended Request message, probably involving a long Distinguished Name (DN) field.
| CPE | Name | Operator | Version |
|---|---|---|---|
| edirectory | ge | 8.7 | |
| edirectory | le | 8.7.3.9 | |
| edirectory | ge | 8.8 | |
| edirectory | le | 8.8.1 |
References
secunia.com/advisories/29476
www.securityfocus.com/archive/1/490117/100/0/threaded
www.securityfocus.com/bid/28434
www.securitytracker.com/id?1019692
www.vupen.com/english/advisories/2008/0987/references
www.zerodayinitiative.com/advisories/ZDI-08-013/
secure-support.novell.com/KanisaPlatform/Publishing/411/3382120_f.SAL_Public.html
Related
cve
cve
CVE-2008-0924
2008-03-28 18:44:00
cvelist
cvelist
CVE-2008-0924
2008-03-28 18:00:00
nvd
nvd
CVE-2008-0924
2008-03-28 18:44:00
securityvulns
securityvulns
Novell eDirectory buffer overflow
2008-03-28 00:00:00
ZDI-08-013: Novell eDirectory for Linux Stack Overflow
2008-03-26 00:00:00
seebug
seebug
Novell eDirectory LDAP扩展请求消息栈溢出漏洞
2008-03-27 00:00:00
zdi
zdi
Novell eDirectory for Linux LDAP delRequest Stack Overflow Vulnerability
2008-03-26 00:00:00