cpe:/a:novell:edirectory:8.7.3.9 cpe:/a:novell:edirectory:8.8.1 CVE-2008-0924 2008-03-28T14:44:00.000-04:00 2011-08-01T00:00:00.000-04:00 6.8 NETWORK MEDIUM NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2008-03-28T18:35:00.000-04:00 ALLOWS_USER_ACCESS SECTRACK 1019692 BUGTRAQ 20080326 ZDI-08-013: Novell eDirectory for Linux Stack Overflow BID 28434 SECUNIA 29476 VUPEN ADV-2008-0987 MISC http://www.zerodayinitiative.com/advisories/ZDI-08-013/ CONFIRM https://secure-support.novell.com/KanisaPlatform/Publishing/411/3382120_f.SAL_Public.html Stack-based buffer overflow in the DoLBURPRequest function in libnldap in ndsd in Novell eDirectory 8.7.3.9 and earlier, and 8.8.1 and earlier in the 8.8.x series, allows remote attackers to cause a denial of service (daemon crash or CPU consumption) or execute arbitrary code via a long delRequest LDAP Extended Request message, probably involving a long Distinguished Name (DN) field.