Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple integer overflows in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.73 before 8.7.3.10 ftf1, allow remote attackers to execute arbitrary code via a crafted (1) Content-Length header in a SOAP request or (2) Netware Core Protocol opcode 0x0F message, which triggers a heap-based buffer overflow.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Novell eDirectory多个缓冲区溢出漏洞
Vulnerability Description
Novell eDirectory是一个的跨平台的目录服务器。 Novell eDirectory默认绑定在TCP 524上的dhost.exe服务没有正确地解析通过Netware Core协议传送的opcode 0x24、0x0F，远程攻击者可以向该服务提交恶意请求触发堆溢出；运行在TCP 8028和8030端口上的Web控制台在处理SOAP请求中的Content-Length头时未经正确的边界检查便执行了拷贝操作，这可能触发整数溢出或堆溢出。成功利用上述任意漏洞都可能导致执行任意指令。
CVSS Information
N/A
Vulnerability Type
N/A