Novell eDirectory LDAP Search Request Heap Corruption Vulnerability

[newsbot]

Novell eDirectory (http://www.novell.com/products/edirectory/) is "cross-platform directory server that implements the Lightweight Directory Access Protocol (LDAP). The search request is used to search a directory tree for objects that match a search filter". Remote exploitation of a heap buffer overflow vulnerability in Novell Inc.'s eDirectory could allow an attacker to execute arbitrary code with the privileges of the affected service.

http://www.securiteam.com/unixfocus/5NP0B00OUM.html