CVE-2006-2496 - Buffer overflow in iMonitor 2.4 in Novell eDirectory 8.8 allows remote attackers to cause a denial o

CVE-2006-2496

Summary

Buffer overflow in iMonitor 2.4 in Novell eDirectory 8.8 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via unknown attack vectors.

References

Vulnerable Configurations

cpe:2.3:a:novell:edirectory:8.8:*:*:*:*:*:*:*
cpe:2.3:a:novell:edirectory:8.8:*:*:*:*:*:*:*
cpe:2.3:a:novell:imonitor:2.4:*:*:*:*:*:*:*
cpe:2.3:a:novell:imonitor:2.4:*:*:*:*:*:*:*

CVSS

Base:	10.0 (as of 18-10-2018 - 16:40)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:L/Au:N/C:C/I:C/A:C

refmap via4

bid	18026
bugtraq	20060522 ZDI-06-016: Novell eDirectory 8.8 NDS Server Buffer Overflow Vulnerability
confirm	http://support.novell.com/cgi-bin/search/searchtid.cgi?/2973759.htm
misc	http://www.zerodayinitiative.com/advisories/ZDI-06-016.html
osvdb	25781
sectrack	1016120
secunia	20139
vupen	ADV-2006-1850
xf	novell-imonitor-bo(26524)

saint via4

bid	18026
description	Novell eDirectory iMonitor NDS buffer overflow
id	web_tool_edirectorybo
osvdb	25781
title	edirectory_imonitor_nds
type	remote

Last major update

18-10-2018 - 16:40

Published

20-05-2006 - 03:02

Last modified

18-10-2018 - 16:40