Novell eDirectory Server Malformed Index Denial Of Service Vulnerability

Bugtraq ID:	43662
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Oct 01 2010 12:00AM
Updated:	Oct 01 2010 12:00AM
Credit:	1c239c43f521145fa8385d64a9c32243 working with Zero Day Initiative.
Vulnerable:	Novell eDirectory 8.8.5 ftf1 Novell eDirectory 8.8.2 ftf2 Novell eDirectory 8.8.2 Novell eDirectory 8.8.1 Novell eDirectory 8.8.5.2 Novell eDirectory 8.8 SP5 FTF1 Novell eDirectory 8.8 SP5 Novell eDirectory 8.8 SP4 FTF1 Novell eDirectory 8.8 SP4 Novell eDirectory 8.8 SP3 FTF3 Novell eDirectory 8.8 SP3 Novell eDirectory 8.8 SP2 Novell eDirectory 8.8 SP1 Novell eDirectory 8.8
Not Vulnerable:	Novell eDirectory 8.8.5 FTF3

Novell eDirectory Server Malformed Index Denial Of Service Vulnerability

Novell eDirectory is prone to a denial-of-service vulnerability.

Remote attackers can exploit this issue to crash the application, denying service to legitimate users.

Versions prior to eDirectory 8.8.5 ftf3 are vulnerable.

Novell eDirectory Server Malformed Index Denial Of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Novell eDirectory Server Malformed Index Denial Of Service Vulnerability

Solution:
Updates are available. Please see the references for details.

Novell eDirectory Server Malformed Index Denial Of Service Vulnerability

References:

• Novell eDirectory Server Malformed Index Denial Of Service Vulnerability (Novell)
  
• Novell Homepage (Novell)
  
• Security Vulnerability - eDirectory Server Malformed Index Denial of Service (Novell)