CVE-2006-4510

The evtFilteredMonitorEventsRequest function in the LDAP service in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted request containing a value that is larger than the number of objects transmitted, which triggers an invalid free of unallocated memory.

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=428	Patch Vendor Advisory
http://secunia.com/advisories/22506	Patch Vendor Advisory
http://securitytracker.com/id?1017104
http://www.securityfocus.com/bid/20663	Patch
http://www.vupen.com/english/advisories/2006/4142
https://exchange.xforce.ibmcloud.com/vulnerabilities/29752

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:novell:edirectory:8.8:::::::*
	cpe:2.3:a:novell:edirectory:8.8.1:::::::*

History

No history.

Information

Published : 2006-10-24 19:07

Updated : 2017-07-20 01:33

NVD link : CVE-2006-4510

Mitre link : CVE-2006-4510

CVE.ORG link : CVE-2006-4510

JSON object : View

Products Affected

novell

edirectory

CWE

NVD-CWE-Other

{"id": "CVE-2006-4510", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2006-10-24T19:07:00.000", "references": [{"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=428", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/22506", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1017104", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/20663", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2006/4142", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29752", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "The evtFilteredMonitorEventsRequest function in the LDAP service in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted request containing a value that is larger than the number of objects transmitted, which triggers an invalid free of unallocated memory."}, {"lang": "es", "value": "La funci\u00f3n evtFilteredMonitorEventsRequest en el servicio LDAP en Novell eDirectory anterior a 8.8.1 FTF1 permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n mediante una petici\u00f3n artesanal que contiene un valor m\u00e1s largo que el n\u00famero de objetos transmitidos, lo cual dispara una liberaci\u00f3n inv\u00e1lida de memoria no asignada."}], "lastModified": "2017-07-20T01:33:08.790", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:novell:edirectory:8.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D7548D05-AD2B-46C3-9036-366585FFCB48"}, {"criteria": "cpe:2.3:a:novell:edirectory:8.8.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C13882AD-D700-4B95-9BB2-B3E0D104B227"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}