CVE-2006-4520

Published: Apr 30, 2007Modified: Apr 23, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

ncp in Novell eDirectory before 8.7.3 SP9, and 8.8.x before 8.8.1 FTF2, does not properly handle NCP fragments with a negative length, which allows remote attackers to cause a denial of service (daemon crash) when the heap is written to a log file.

Affected (3)

Products: Novell: Edirectory

Novell

1 product

Edirectory

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Novell Edirectory	Up to 8.7.3.8
Novell Edirectory	Version 8.8.1
Novell Edirectory	Version 8.8

References (12)

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=518

Source: cve@mitre.org

Vendor Advisory

http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=3924657&sliceId=SAL_Public

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/23685

Source: cve@mitre.org

http://www.securitytracker.com/id?1017972

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1550

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/33921

Source: cve@mitre.org

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=518