Upstream information

CVE-2008-0924 at MITRE

Description

Stack-based buffer overflow in the DoLBURPRequest function in libnldap in ndsd in Novell eDirectory 8.7.3.9 and earlier, and 8.8.1 and earlier in the 8.8.x series, allows remote attackers to cause a denial of service (daemon crash or CPU consumption) or execute arbitrary code via a long delRequest LDAP Extended Request message, probably involving a long Distinguished Name (DN) field.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having moderate severity.

CVSS v2 Scores
  National Vulnerability Database
Base Score 6.8
Vector AV:N/AC:M/Au:N/C:P/I:P/A:P
Access Vector Network
Access Complexity Medium
Authentication None
Confidentiality Impact Partial
Integrity Impact Partial
Availability Impact Partial
SUSE Bugzilla entry: 376640 [CLOSED / FIXED]

SUSE Security Advisories:

  • TID3382120, published Sun May 20 03:49:57 CEST 2018

SUSE Timeline for this CVE

CVE page created: Fri Jun 28 02:58:31 2013
CVE page last modified: Fri Oct 7 12:45:40 2022