Novell eDirectory Multiple Vulnerabilities

Bugtraq ID:	35666
Class:	Unknown
CVE:	CVE-2009-0192
Remote:	Yes
Local:	No
Published:	Jul 14 2009 12:00AM
Updated:	Nov 17 2009 03:26PM
Credit:	Alin Rad Pop and Novell
Vulnerable:	Novell eDirectory 8.8 SP3 FTF3 Novell eDirectory 8.8 SP3
Not Vulnerable:	Novell eDirectory 8.8 SP5

Novell eDirectory Multiple Vulnerabilities

Novell eDirectory is prone to multiple buffer-overflow and denial-of-service vulnerabilities.

Successful exploits may allow attackers to execute arbitrary code within the context of the affected application or cause denial-of-service conditions.

These issues affect eDirectory 8.8 SP3 and 8.8 SP3 FTF3.

Novell eDirectory Multiple Vulnerabilities

The following exploit is available for the LDAP issue:

• /data/vulnerabilities/exploits/35666.py

Novell eDirectory Multiple Vulnerabilities

Solution:
The vendor has released fixes. Please see the references for details.

Novell eDirectory Multiple Vulnerabilities

References:

• eDirectory Product Homepage (Novell)
  
• History of Issues Resolved in eDirectory 8.8.x (Novell)
  
• Novell eDirectory iMonitor Accept-Language Buffer Overflow (Secunia)
  
• Secunia Research: Novell eDirectory iMonitor 'Accept-Language' Buffer Overflow (Secunia Research )