A vulnerability has been reported in Novell eDirectory, which can be exploited by malicious people to potentially compromise a vulnerable system.

The vulnerability is caused due to a use-after-free error in the NetWare Core Protocol (NCP) engine when handling "Get NCP Extension Information By Name" requests and can exploited to dereference already freed memory.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is reported in version 8.8 SP2 for Windows. Other versions may also be affected.

Solution
Apply patches.

Provided and/or discovered by
An anonymous person via iDefense.

Changelog
Further details available in Customer Area

Original Advisory
Novell:
http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037181.html
http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037180.html

iDefense:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=748

Deep Links
Links available in Customer Area