Vulnerabilities Affecting Novell eDirectory, IBM DB2 and Openwsman

November 4th, 2008

The Sourcefire VRT is aware of vulnerabilities affecting Novell eDirectory, IBM DB2 and Openwsman.

Details: 

Novell eDirectory Buffer Overflow (CVE-2008-4479):
Novell eDirectory contains a programming error that may allow a remote attacker to execute code on a vulnerable system. The vulnerability is exposed when the application attempts to parse a SOAP request with a long header field.
Rules to detect attacks targeting this vulnerability are included in this release and are identified with GID 1, SIDs 14989 and 14990.
IBM DB2 Buffer Overflow (CVE-2008-3854):
IBM DB2 is prone to multiple stack buffer overflows which may allow a remote attacker to cause a Denial of Service (DoS) via the use of excess data in multiple statements.
A rule to detect attacks targeting this vulnerability is included in this release and is identified with GID 1, SID 14991.
Openwsman Buffer Overflow (CVE-2008-2234):
Openwsman contains programming errors that may allow a remote attacker to execute code on an affected system. The vulnerability may be exploited via a specially crafted HTTP header.
A rule to detect attacks targeting this vulnerability is included in this release and is identified with GID 1, SID 14992.

For Assistance