Secunia

Some vulnerabilities have been reported in Novell eDirectory, which can be exploited to cause a DoS (Denial of Service) and potentially compromise a vulnerable system.

1) An unspecified error can be exploited to crash the ndsd daemon.

2) An error in the processing of certain packets can be exploited to cause a stack-based buffer overflow within the ndsd daemon.

3) An unspecified error can be exploited to stop the ndsd daemon from responding.

4) An unspecified error can be exploited to crash the ndsd daemon.

Vulnerabilities #1, #2, and #4 are reported in Novell eDirectory 8.7.3 SP10b. Vulnerability #3 is reported in Novell eDirectory 8.7.3. Other versions may also be affected.

Solution
Due to the very limited available information, it is not possible to suggest an effective workaround.

Provided and/or discovered by
Reported as modules included in VulnDisco Pack.

Changelog
Further details available in Customer Area

Original Advisory
http://intevydis.com/vd-list.shtml
http://intevydis.blogspot.com/2010/01/novell-edirectory-873-overflow.html

Deep Links
Links available in Customer Area