Design/Logic Flaw

2009-11-0418:30:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

High

0.024 Low

EPSS

Percentile

90.1%

JSON

The NDSD process in Novell eDirectory 8.7.3 before 8.7.3.10 ftf2 and eDirectory 8.8 before 8.8.5 ftf1 does not properly handle certain LDAP search requests, which allows remote attackers to cause a denial of service (application hang) via a search request with a NULL BaseDN value.

CPENameOperatorVersion
edirectoryeq8.7.3.9
edirectoryeq8.7.3 sp5-windows
edirectoryeq8.8
edirectoryeq8.8 sp3
edirectoryeq8.7.3
edirectoryeq8.7.3 sp4-windows
edirectoryeq8.8 sp1
edirectoryeq8.8 sp4
edirectoryeq8.7.3 sp8-windows
edirectoryeq8.8.2

Name	Operator	Version
edirectory	eq	8.7.3.9
edirectory	eq	8.7.3 sp5-windows
edirectory	eq	8.8
edirectory	eq	8.8 sp3
edirectory	eq	8.7.3
edirectory	eq	8.7.3 sp4-windows
edirectory	eq	8.8 sp1
edirectory	eq	8.8 sp4
edirectory	eq	8.7.3 sp8-windows
edirectory	eq	8.8.2