Novell eDirectory malformed index value Remote Denial of Service Vulnerability and repair solution

Affected Versions:
Novell eDirectory vulnerability description:
Novell eDirectory is a cross-platform Directory Server.

An eDirectory NCP implementation vulnerability exists. Remote attackers may exploit this vulnerability to cause a server crash and cause a denial of service (DoS.

NCP listens to TCP port 524. It blindly trusts a field from user data and converts it into a table index for access, if this index value is set to a large value, illegal memory access is triggered, resulting in a process crash.

<* Reference
Http://www.novell.com/support/viewContent.do? ExternalId = 7006389 & amp; sliceId = 2
*>

Vendor patch:

Novell
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.novell.com/support/viewContent.do? ExternalId = 7006389 & amp; sliceId = 2