Unscored severity · published Dec 31, 2004
CVE-2004-1236
Buffer overflow in the LDAP component for Netscape Directory Server (NDS) 3.6 on HP-UX and other operating systems allows remote attackers to execute arbitrary code
–
CVSS
8.9%
EPSS
No
On KEV
Description
Buffer overflow in the LDAP component for Netscape Directory Server (NDS) 3.6 on HP-UX and other operating systems allows remote attackers to execute arbitrary code.
Exploitation
Is it being used?
Exploit prediction (EPSS)8.9% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DS
Directory Server · Netscape
3.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-1236
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-1236
marc.info
http://marc.info/?l=bugtraq&m=110384298016120
secunia.com
http://secunia.com/advisories/14960
Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-57754-1
www.ciac.org
http://www.ciac.org/ciac/bulletins/p-083.shtml
Third Party Advisory
http://www.kb.cert.org/vuls/id/258905
www.securityfocus.com
http://www.securityfocus.com/bid/12099
More from Directory Server
–
CVE-2004-0826
Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2…
–
CVE-2001-0164
Buffer overflow in Netscape Directory Server 4.12 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed recipient field
–
CVE-2000-1076
Netscape (iPlanet) Certificate Management System 4.2 and Directory Server 4.12 stores the administrative password in plaintext, which could allow local and possibly remote…
–
CVE-2000-1075
Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote attackers to read arbitrary files via a
–
CVE-1999-0807
The Netscape Directory Server installation procedure leaves sensitive information in a file that is accessible to local users