CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-4520

ncp in Novell eDirectory before 8.7.3 SP9, and 8.8.x before 8.8.1 FTF2, does not properly handle NCP fragments with a negative length, which allows remote attackers to cause a denial of service (daemon crash) when the heap is written to a log file.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.083

EPSS Ranking 91.9%

CVSS Severity

CVSS v2 Score 7.8

References

Products affected by CVE-2006-4520

Novell » Edirectory » Version: N/A

cpe:2.3:a:novell:edirectory:-
Novell » Edirectory » Version: 8.0

cpe:2.3:a:novell:edirectory:8.0
Novell » Edirectory » Version: 8.5

cpe:2.3:a:novell:edirectory:8.5
Novell » Edirectory » Version: 8.5.12a

cpe:2.3:a:novell:edirectory:8.5.12a
Novell » Edirectory » Version: 8.5.27

cpe:2.3:a:novell:edirectory:8.5.27
Novell » Edirectory » Version: 8.6.2

cpe:2.3:a:novell:edirectory:8.6.2
Novell » Edirectory » Version: 8.7

cpe:2.3:a:novell:edirectory:8.7
Novell » Edirectory » Version: 8.7.1

cpe:2.3:a:novell:edirectory:8.7.1
Novell » Edirectory » Version: 8.7.3

cpe:2.3:a:novell:edirectory:8.7.3
Novell » Edirectory » Version: 8.7.3.8

cpe:2.3:a:novell:edirectory:8.7.3.8
Novell » Edirectory » Version: 8.8

cpe:2.3:a:novell:edirectory:8.8
Novell » Edirectory » Version: 8.8.1

cpe:2.3:a:novell:edirectory:8.8.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-4520

Products

Pricing

Contact Us