Novell eDirectory eMBox SOAP Request Denial Of Service Vulnerability
BID:38157
Info
Novell eDirectory eMBox SOAP Request Denial Of Service Vulnerability
| Bugtraq ID: | 38157 |
| Class: | Unknown |
| CVE: |
CVE-2010-0666 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 09 2010 12:00AM |
| Updated: | Mar 02 2010 10:12PM |
| Credit: | 1c239c43f521145fa8385d64a9c32243 working with Zero Day Initiative. |
| Vulnerable: |
Novell eDirectory 8.8.5 ftf1 Novell eDirectory 8.8.2 ftf2 Novell eDirectory 8.8.2 Novell eDirectory 8.8.1 Novell eDirectory 8.7.3 SP10b Novell eDirectory 8.7.3 SP10 FTF1 Novell eDirectory 8.7.3 sp10 Novell eDirectory 8.7.3 .8 pre-SP9 Novell eDirectory 8.7.3 .8 Novell eDirectory 8.7.3 Novell eDirectory 8.8.5.2 Novell eDirectory 8.8 SP5 FTF1 Novell eDirectory 8.8 SP5 Novell eDirectory 8.8 SP4 FTF1 Novell eDirectory 8.8 SP4 Novell eDirectory 8.8 SP3 FTF3 Novell eDirectory 8.8 SP3 Novell eDirectory 8.8 SP2 Novell eDirectory 8.8 SP1 Novell eDirectory 8.8 Novell eDirectory 8.7.3.9 Novell eDirectory 8.7.3.10b Hotfix 1 Novell eDirectory 8.7.3.10 ftf2 Novell eDirectory 8.7.3.10 |
| Not Vulnerable: |
Novell eDirectory 8.8.5.3 |
Discussion
Novell eDirectory eMBox SOAP Request Denial Of Service Vulnerability
Novell eDirectory is prone to a denial-of-service vulnerability.
Remote attackers can exploit this issue to crash the application, denying service to legitimate users.
Versions prior to eDirectory 8.8 SP5 Patch 3 are vulnerable.
Novell eDirectory is prone to a denial-of-service vulnerability.
Remote attackers can exploit this issue to crash the application, denying service to legitimate users.
Versions prior to eDirectory 8.8 SP5 Patch 3 are vulnerable.
Exploit / POC
Novell eDirectory eMBox SOAP Request Denial Of Service Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Novell eDirectory eMBox SOAP Request Denial Of Service Vulnerability
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
Novell eDirectory eMBox SOAP Request Denial Of Service Vulnerability
References:
References:
- History of Issues Resolved in eDirectory 8.8.x (Novell)
- Novell Homepage (Novell)
- ZDI-10-024: Novell eDirectory SOAP Request Parsing Denial of Service Vulnerabili (Zero Day Initiative)
- ZDI-10-024: Novell eDirectory SOAP Request Parsing Denial of Service Vulnerabili (ZDI Disclosures
- Security Vulnerability: eDirectory eMBox SOAP Request Parsing DoS (Novell)