HTTP: Novell eDirectory dhost HTTPSTK Buffer Overflow

This signature detects attempts to exploit a known vulnerability in the Novell eDirectory dhost. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the affected server.

Extended Description

Novell eDirectory is prone to multiple stack-based buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data. Attackers can exploit these issues to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely cause denial-of-service conditions. Novell eDirectory 8.8 SP5 is vulnerable; other versions may also be affected.

Affected Products

Novell edirectory

References

BugTraq: 37042

CVE: CVE-2009-4654

URL: http://tcc.hellcode.net/advisories/hellcode-adv005.txt

Short Name

HTTP:NOVELL:EDIR-DHOST

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Novell eDirectory dhost HTTPSTK Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?