Vulnerability CVE-2012-0432
Published: 2012-12-25

Description:
Stack-based buffer overflow in the Novell NCP implementation in NetIQ eDirectory 8.8.7.x before 8.8.7.2 allows remote attackers to have an unspecified impact via unknown vectors.

See advisories in our WLB2 database:
Topic
Author
Date
High
Novell NCP Pre-Auth Remote Stack-Based Buffer Overflow
David Klein
15.01.2013
High
Novell NCP Pre-Auth Remote Stack-Based Buffer Overflow Exploit
Gary Nilson
19.01.2013
High
Novell eDirectory 8 Buffer Overflow
Juan vazquez
25.01.2013

Type:

CWE-119

 (Improper Restriction of Operations within the Bounds of a Memory Buffer)

CVSS2 => (AV:N/AC:L/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
10/10
10/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
Netiq -> Edirectory 

 References:
https://bugzilla.novell.com/show_bug.cgi?id=785272
http://www.novell.com/support/kb/doc.php?id=3426981
Copyright 2024, cxsecurity.com

 

Back to Top