CVE-2006-4510

published 2006-10-24

CVE-2006-4510: The evtFilteredMonitorEventsRequest function in the LDAP service in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a…

critical 10 CVSS 3.1

AV N AC L Au N C C I C A C

The evtFilteredMonitorEventsRequest function in the LDAP service in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted request containing a value that is larger than the number of objects transmitted, which triggers an invalid free of unallocated memory.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
novell	edirectory	—	—
novell	edirectory	—	—