Description
Unspecified vulnerability in the NCP service in Novell eDirectory 8.8.5 before 8.8.5.6 and 8.8.6 before 8.8.6.2 allows remote attackers to cause a denial of service (hang) via a malformed FileSetLock request to port 524.
References
- http://www.novell.com/support/viewContent.do?externalId=7007781&sliceId=2
- ADV-2011-0305 vdb-entry
- 43186 third-party-advisory
- 46263 vdb-entry
- 8071 third-party-advisory
- http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-novell
- 20110207 ZDI-11-060: Novell eDirectory Malformed NCP Request Denial of Service Vulnerability mailing-list
- http://www.zerodayinitiative.com/advisories/ZDI-11-060