Description
The evtFilteredMonitorEventsRequest function in the LDAP service in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted request containing a value that is larger than the number of objects transmitted, which triggers an invalid free of unallocated memory.
References
- 20663 vdb-entry
- edirectory-eventsrequest-code-execution(29752) vdb-entry
- 20061022 Novell eDirectory evtFilteredMonitorEventsRequest Invalid Free Vulnerability third-party-advisory
- 22506 third-party-advisory
- 1017104 vdb-entry
- ADV-2006-4142 vdb-entry