Test ID:	1.3.6.1.4.1.25623.1.0.902291
Category:	Denial of Service
Title:	Novell eDirectory DoS Vulnerability (Feb 2011)
Summary:	Novell eDirectory is prone to a denial of service (DoS); vulnerability.
Description:	Summary: Novell eDirectory is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: This flaw is caused by an error in the 'NCP' implementation when processing malformed 'FileSetLock' requests sent to port 524. Vulnerability Impact: Successful exploitation will allow remote attackers to cause a vulnerable service to become unresponsive, leading to a denial of service condition. Affected Software/OS: Novell eDirectory version 8.8.5 prior to 8.8.5.6 (8.8.5.SP6) and 8.8.6 prior to 8.8.6.2 (8.8.6.SP2) on Linux. Solution: Update to version 8.8.5.6, 8.8.6.2 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-4327 BugTraq ID: 46263 http://www.securityfocus.com/bid/46263 Bugtraq: 20110207 ZDI-11-060: Novell eDirectory Malformed NCP Request Denial of Service Vulnerability (Google Search) http://www.securityfocus.com/archive/1/516279/100/0/threaded http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-novell http://www.zerodayinitiative.com/advisories/ZDI-11-060 http://secunia.com/advisories/43186 http://securityreason.com/securityalert/8071 http://www.vupen.com/english/advisories/2011/0305
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.