Novell eDirectory NMAS BerDecodeLoginDataRequeset Denial of Service Vulnerability

Bugtraq ID:	20842
Class:	Boundary Condition Error
CVE:	CVE-2006-4521
Remote:	Yes
Local:	No
Published:	Oct 31 2006 12:00AM
Updated:	Nov 02 2006 12:42AM
Credit:	An anonymous user is credited with discovering this vulnerability.
Vulnerable:	Novell eDirectory 8.8.1 Novell eDirectory 8.8
Not Vulnerable:

Novell eDirectory NMAS BerDecodeLoginDataRequeset Denial of Service Vulnerability

The Novell eDirectory server NMAS is prone to a denial-of-service vulnerability.

An attacker could leverage this issue to cause the service to stop responding, effectively denying service to legitimate users.

Novell eDirectory NMAS BerDecodeLoginDataRequeset Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

Novell eDirectory NMAS BerDecodeLoginDataRequeset Denial of Service Vulnerability

Solution:
The vendor released an update to address this issue. Please contact the vendor for information on how to obtain and apply this update.

Novell eDirectory NMAS BerDecodeLoginDataRequeset Denial of Service Vulnerability

References:

• eDirectory Product Homepage (Novell)
  
• [Full-disclosure] iDefense Security Advisory 10.27.06: Novell eDirectory NMAS Be ( iDefense Labs)