Description
The BerDecodeLoginDataRequest function in the libnmasldap.so NMAS module in Novell eDirectory 8.8 and 8.8.1 before the Security Services 2.0.3 patch does not properly increment a pointer when handling certain input, which allows remote attackers to cause a denial of service (invalid memory access) via a crafted login request.
References
- 22660 third-party-advisory
- ADV-2006-4293 vdb-entry
- 20842 vdb-entry
- novell-berdecodelogindatarequeset-dos(29963) vdb-entry
- 20061027 Novell eDirectory NMAS BerDecodeLoginDataRequeset DoS Vulnerability third-party-advisory
- 1017140 vdb-entry