CVE-2006-4177

published 2006-10-24

CVE-2006-4177: Heap-based buffer overflow in the NCP engine in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted NCP over IP…

high 7.5 CVSS 3.1

AV N AC L Au N C P I P A P

Heap-based buffer overflow in the NCP engine in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted NCP over IP packet that causes NCP to read more data than intended.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
novell	edirectory	<= 8.8.1	—
novell	edirectory	—	—