Novell.eDirectory.Unchecked.Length.DoS

Description

This indicates an attack attempt against a Denial of Service vulnerability in Novell eDirectory.
The vulnerability is caused by an unchecked user supplied length value that is used during memory allocation, while parsing incoming LDAP requests. A remote unauthenticated attacker can exploit this vulnerability by sending a specially crafted packet to the vulnerable server.

Affected Products

Novell eDirectory 8.8.5 and prior.

Impact

Denial of Service: Remote attackers can crash vulnerable systems.

Recommended Actions

Refer to the vendor's website for a suggested workaround.
http://www.novell.com/support/viewContent.do?externalId=7007781

References