Some vulnerabilities have been reported in Novell eDirectory, which can be exploited by malicious users to compromise a vulnerable system and by malicious people to cause a DoS (Denial of Service).

1) An error within NDSD in jclient can be exploited to cause a buffer overflow.

For more information see vulnerability #1 in:
SA40281

2) A boundary error in the "RelativeToFullDN()" function when parsing LDAP requests containing the "Nds To Ldap Response" class can be exploited to cause a stack-based buffer overflow.

3) An error within LDAP in FreeNDSReferralList can be exploited to corrupt memory.

The vulnerabilities are reported in versions prior to 8.8 SP6 Patch 5 (20606.01).

Solution
Update to version 8.8.6.5 (8.8 SP6 Patch 5 (20606.01)).

Provided and/or discovered by
2) An anonymous person via ZDI.
3) Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
Novell:
http://www.novell.com/support/viewContent.do?externalId=3426981
http://www.novell.com/support/viewContent.do?externalId=7009947

ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-12-146/

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers