CVE-2006-4510: Critical severity Novell eDirectory vulnerability
Published Oct 24, 2006
·Updated
The evtFilteredMonitorEventsRequest function in the LDAP service in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted request containing a value that is larger than the number of objects transmitted, which triggers an invalid free of unallocated memory.
Affected Software
2 affected components
Novell eDirectory=8.8
Novell eDirectory=8.8.1
Remediation
Patch Available
Patch Available
Event History
Oct 24, 2006
CVE Published
07:07 PM
Data Sourced
via NVD·07:07 PM
RemedyDescriptionSeverityAffected Software
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-4510?
CVE-2006-4510 has a high severity rating due to the potential for remote code execution.
2
How do I fix CVE-2006-4510?
To fix CVE-2006-4510, update Novell eDirectory to version 8.8.1 FTF1 or later.
3
What versions of Novell eDirectory are affected by CVE-2006-4510?
CVE-2006-4510 affects Novell eDirectory versions 8.8 and 8.8.1 prior to FTF1.
4
What type of attack does CVE-2006-4510 allow?
CVE-2006-4510 allows remote attackers to execute arbitrary code.
5
What is the cause of the vulnerability CVE-2006-4510?
CVE-2006-4510 is caused by improper handling of crafted requests in the LDAP service.