Submit a Story      Security   FAQ    Resources    Certification    Links    Calendar    Forum    Polls    Search      
User Functions
:

:

Don't have an account yet? Sign up as a New User
Lost your password?

What's New
STORIES
No new stories

COMMENTS last 2 days
No new comments

TRACKBACKS last 2 days
  • [SA41194] Novell ...
  • [SA41180] Novell ...

  • LINKS last 2 weeks
    No recent new links


    Who's Online
    Guest Users: 8

    Live Novell Chat
    Live Novell Chat

    Topics
    Home
    Contracting (2/0)
    FAQ (1/0)
    NetWare (49/0)
    Certification (31/0)
    NDS/eDir (19/0)
    Administration (78/0)
    GroupWise (117/0)
    Linux/Open Source (298/0)
    Resources (21/0)
    General News (846/0)
    Security (253/0)

    Poll
    Will you be upgrading to BES 5.0.1 for GroupWise?
    Yes, so why did it take so long?
    Yes, after GW8 upgrade
    No, still on GW7
    No, do not use BB devices
    No, moved away from GW
    Results
    27 votes | 0 comments


     [SA38030] Novell iManager eDirectory Plugin Schema Processing Buffer Overflow    
     Author:  kkbass
     Dated:  Sunday, January 17 2010 @ 10:58 AM EST
     Viewed:  220 times  
    General NewsTITLE:
    Novell iManager eDirectory Plugin Schema Processing Buffer Overflow

    SECUNIA ADVISORY ID:
    SA38030

    VERIFY ADVISORY:
    http://secunia.com/advisories/38030/

    DESCRIPTION:
    A vulnerability has been reported in Novell iManager, which can be
    exploited by malicious people to compromise a user's system.

    The vulnerability is caused due to a boundary error in the eDirectory
    plugin when processing schema information. This can be exploited to
    cause a stack-based buffer overflow when specially crafted schema
    information is imported or exported.

    Successful exploitation allows execution of arbitrary code.

    The vulnerability is reported in versions 2.7.2 and prior.

    SOLUTION:
    Apply SP3 for iManager 2.7 and update the eDirectory plugin to
    version 2.7.3.

    PROVIDED AND/OR DISCOVERED BY:
    1c239c43f521145fa8385d64a9c32243, reported via ZDI

    ORIGINAL ADVISORY:
    Novell:
    http://www.novell.com/support/viewContent.do?externalId=7004985&sliceId=1

    ZDI:
    http://www.zerodayinitiative.com/advisories/ZDI-10-001/

    ----------------------------------------------------------------------

    About:
    This Advisory was delivered by Secunia as a free service to help
    private users keeping their systems up to date against the latest
    vulnerabilities.

    Subscribe:
    http://secunia.com/advisories/secunia_security_advisories/

    Definitions: (Criticality, Where etc.)
    http://secunia.com/advisories/about_secunia_advisories/


    Please Note:
    Secunia recommends that you verify all advisories you receive by
    clicking the link.
    Secunia NEVER sends attached files with advisories.
    Secunia does not advise people to install third party patches, only
    use those supplied by the vendor.



    What's Related

    Story Options
  • Mail Story to a Friend
  • Printable Story Format

  • Trackback

    Trackback URL for this entry: http://www.abend.org/trackback.php/20100117105837793

    No trackback comments for this entry.
    [SA38030] Novell iManager eDirectory Plugin Schema Processing Buffer Overflow | 0 comments | Create New Account
    The following comments are owned by whomever posted them. This site is not responsible for what they say.