CVE-2006-4177 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Edirectory

3 documents3 sources
Severity
7.5HIGHNVD
EPSS
9.6%
top 7.12%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Novell Edirectory
Timeline
PublishedOct 24
Latest updateMay 1

Description

Heap-based buffer overflow in the NCP engine in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted NCP over IP packet that causes NCP to read more data than intended.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDnovell/edirectory8.8.1+1

Patches

Patch: labs.idefense.com ↗Patch: secunia.com ↗Patch: support.novell.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-6pp4-gfm6-5rm4: Heap-based buffer overflow in the NCP engine in Novell eDirectory before 8↗2022-05-01
▶
CVEList
CVE-2006-4177: Heap-based buffer overflow in the NCP engine in Novell eDirectory before 8↗2006-10-24
▶
CVE-2006-4177 — Novell Edirectory vulnerability | cvebase