CVE-2006-4521: Novell Edirectory

Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days.

The BerDecodeLoginDataRequest function in the libnmasldap.so NMAS module in Novell eDirectory 8.8 and 8.8.1 before the Security Services 2.0.3 patch does not properly increment a pointer when handling certain input, which allows remote attackers to cause a denial of service (invalid memory access) via a crafted login request.

Affected products

• Novell Edirectory: version 8.8 only; version 8.8.1 only

Published 2006-11-04. Last modified 2026-06-16.