Novell eDirectory Multiple Remote Vulnerabilities

Bugtraq ID:	40541
Class:	Unknown
CVE:	CVE-2009-4653
Remote:	Yes
Local:	No
Published:	May 31 2010 12:00AM
Updated:	Jun 03 2010 04:50PM
Credit:	HACKATTACK, ZDI, and Novell.
Vulnerable:	Novell eDirectory 8.8 SP5 FTF1 Novell eDirectory 8.8 SP5 Novell eDirectory 8.8 SP4 FTF1 Novell eDirectory 8.8 SP4 Novell eDirectory 8.8 SP3 FTF3 Novell eDirectory 8.8 SP3 Novell eDirectory 8.8 SP2 Novell eDirectory 8.8 SP1 Novell eDirectory 8.8
Not Vulnerable:	Novell eDirectory 8.8 SP5 Patch 4

Novell eDirectory Multiple Remote Vulnerabilities

Novell eDirectory is prone to multiple remote vulnerabilities.

Successful exploits may allow attackers to execute arbitrary code within the context of the affected application or cause denial-of-service conditions.

These issues affect eDirectory versions prior to 8.8 SP5 Patch 4.

Novell eDirectory Multiple Remote Vulnerabilities

Currently we are not aware of any exploits. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

Novell eDirectory Multiple Remote Vulnerabilities

Solution:
The vendor has released fixes. Please see the references for details.

Novell eDirectory Multiple Remote Vulnerabilities

References:

• 3426981 History of Issues Resolved in eDirectory 8.8.x (Novell)
  
• 5076150 eDirectory 20100430 (Novell)
  
• 5076151 eDirectory 20100430 (Novell)
  
• eDirectory Product Homepage (Novell)