Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Heap-based buffer overflow in Novell eDirectory 8.7.3 before 8.7.3.10b, and 8.8 before 8.8.2 FTF2, allows remote attackers to execute arbitrary code via an LDAP search request containing "NULL search parameters."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Novell eDirectory LDAP服务Search参数堆溢出漏洞
Vulnerability Description
Novell eDirectory是一个的跨平台的目录服务器。 eDirectory的LDAP服务在分配用于存储search参数的堆缓冲区时存在计算错误,如果远程攻击者向该服务传送了空的search参数的话,就可以触发堆溢出,破坏堆管理结构和函数指针,导致执行任意指令。溢出缓冲区的数据是非受控的,因此成功利用比较困难。
CVSS Information
N/A
Vulnerability Type
N/A