Signature Detail
Short Name |
LDAP:EDIRECTORY-DOS |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
LDAP |
Keywords |
Novell eDirectory Unchecked Length Denial of Service |
Release Date |
2011/06/20 |
Update Number |
1942 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
LDAP: Novell eDirectory Unchecked Length Denial of Service
A denial of service vulnerability exists in the LDAP service of Novell eDirectory. An unchecked user-supplied length value is used during memory allocation while parsing incoming LDAP requests. A remote unauthenticated attacker can exploit this vulnerability by sending a specially crafted packet to the vulnerable server. This can cause the LDAP service to consume an excessive amount of memory, creating a denial of service condition in the LDAP process.
References