A vulnerability and a security issue have been reported in Novell eDirectory, which potentially can be exploited by malicious, local users to disclose sensitive information and by malicious people to cause a DoS (Denial of Service).

1) An unspecified error may exhaust CPU resources during a Nessus scan.

2) The eMBoxClient.jar iManager prints user passwords in a log file.

NOTE: Other issues, where some may be security related, have also been reported.

Solution
Apply patch (for eDirectory 8.7.3.8 for the Linux, Solaris, AIX, and HPUX platforms):
Further details available to Secunia VIM customers

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2973826.htm

Deep Links
Links available to Secunia VIM customers