Novell eDirectory iMonitor buffer overflow

Added: 11/29/2005
CVE: CVE-2005-2551
BID: 14548
OSVDB: 18703

Background

iMonitor is a web service which is a component of Novell eDirectory.

Problem

A buffer overflow when processing long HTTP or HTTPS requests leads to remote command execution.

Resolution

Upgrade to eDirectory 8.7.3 IR7 or higher when available, or apply the edir873ptf_imon1.exe and httpstkupd patches.

References

<http://secunia.com/advisories/16393&gt;

Limitations

Novell eDirectory 8.7.3.

Platforms

Windows 2000
Windows XP / Windows XP SP1
Windows XP SP2
Windows Server 2003