VUPEN - Novell eDirectory eMBox SOAP Request Denial of Service Vulnerability / Exploit (Security Advisories

	About Us \| Contact Us

VUPEN Free Resources

VUPEN Security Advisories

VUPEN Security Blog & News

Zero-day Attacks Monitor

Daily Security Mailinglist

Explanation of Terms

Advanced Search Engine

Novell eDirectory eMBox SOAP Request Denial of Service Vulnerability

VUPEN ID	VUPEN/ADV-2010-0334
CVE ID	CVE-2010-0666
CWE ID	Available in VUPEN VNS Customer Area
CVSS V2	Available in VUPEN VNS Customer Area
Rated as	Low Risk
Impact	Available in VUPEN VNS Customer Area
Authentication Level	Available in VUPEN VNS Customer Area
Access Vector	Available in VUPEN VNS Customer Area
Release Date	2010-02-09
Share

Technical Description

A vulnerability has been identified in Novell eDirectory, which could be exploited by remote attackers to cause a denial of service. This issue is caused by an unspecified error in eMBox when processing malformed SOAP requests, which could be exploited by attackers to crash an affected server, creating a denial of service condition.

Affected Products

Novell eDirectory version 8.8 SP5 Patch 2 and prior

Solution

Upgrade to Novell eDirectory version 8.8 SP5 Patch 3.

References

http://www.vupen.com/english/advisories/2010/0334
http://www.novell.com/support/viewContent.do?externalId=3426981

Credits

Vulnerability reported by ZDI.

Changelog

2010-02-09 : Initial release

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.

Monthly Statistics

VUPEN Security Advisories By Criticality: Sep 2010
Critical Risk	: 14%
High Risk	: 3%
Moderate Risk	: 45%
Low Risk	: 38%

Get a real-time view of the vulnerabilities affecting your systems using the VUPEN VNS reporting capabilities.

Try VUPEN VNS