| Author: |
kkbass |
| Dated: |
Tuesday, April 15 2008 @ 09:38 AM EDT |
| Viewed: |
58 times |
|
 SECUNIA ADVISORY ID:SA29805
VERIFY ADVISORY:http://secunia.com/advisories/29805/
CRITICAL:Less critical
IMPACT:DoS
WHERE:From local network
SOFTWARE:
Novell eDirectory 8.x
http://secunia.com/product/1120/
DESCRIPTION:
A vulnerability has been reported in Novell eDirectory, which can be
exploited by malicious people to cause a DoS (Denial of Service).
The vulnerability is caused due to an error within dhost.exe when
processing "Connection" headers in a HTTP request. This can be
exploited to cause dhost.exe to consume large amounts of CPU resource
via e.g. sending multiple HTTP requests containing specially crafted
"Connection" headers.
The vulnerability affects the following versions on Windows 2000/2003
systems:
* Novell eDirectory 8.8.1 and prior
* Novell eDirectory 8.7.3.9 and prior
SOLUTION:
Update to version 8.8.2 or apply eDirectory 8.7.3 sp10.
http://download.novell.com/
PROVIDED AND/OR DISCOVERED BY:
The vendor credits Nicholas Gregorie.
ORIGINAL ADVISORY:
Novell (3829452):
http://www.novell.com/support/viewContent.do?externalId=3829452&sliceId=1
----------------------------------------------------------------------
About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.
Subscribe:
http://secunia.com/secunia_security_advisories/
Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/
Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.
----------------------------------------------------------------------
|
Trackback URL for this entry: http://www.abend.org/trackback.php/20080415093859170
No trackback comments for this entry.
|
Tuesday, May 13 2008 @ 06:23 PM EDT