CVE-2006-4521

Novell eDirectory 8.8-8.8.1 - Denial of Service via Crafted Login Request

Title source: llm

Description

The BerDecodeLoginDataRequest function in the libnmasldap.so NMAS module in Novell eDirectory 8.8 and 8.8.1 before the Security Services 2.0.3 patch does not properly increment a pointer when handling certain input, which allows remote attackers to cause a denial of service (invalid memory access) via a crafted login request.

References (6)

Core 6

Core References

Patch, Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/22660

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2006/4293

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/20842

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/29963

Patch, Vendor Advisory third-party-advisory x_refsource_idefense

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=437

Patch vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1017140

Scores

EPSS 0.0340

EPSS Percentile 87.6%

Details

Status published

Products (2)

novell/edirectory 8.8

novell/edirectory 8.8.1

Published Nov 04, 2006

Tracked Since Feb 18, 2026