CVE-2006-4509
Integer overflow in the evtFilteredMonitorEventsRequest function in the LDAP service in Novell...
Integer overflow in the evtFilteredMonitorEventsRequest function in the LDAP service in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted request.
Exploit likelihood
What each source reports
NVD Score used
10.0
Integer overflow in the evtFilteredMonitorEventsRequest function in the LDAP service in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted request.
- Record
CVE-2006-4509- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Integer overflow in the evtFilteredMonitorEventsRequest function in the LDAP service in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted request.
- Record
CVE-2006-4509- Updated
- 2026-11-02
EUVDEUVD-2006-4497 No score
Integer overflow in the evtFilteredMonitorEventsRequest function in the LDAP service in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted request.
- Record
EUVD-2006-4497- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-52fc-3qh4-mv68 No score
Integer overflow in the evtFilteredMonitorEventsRequest function in the LDAP service in Novell...
Integer overflow in the evtFilteredMonitorEventsRequest function in the LDAP service in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted request.
- Record
GHSA-52fc-3qh4-mv68- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-4509 is a high vulnerability (CVSS 10.0) in Novell Edirectory, published October 24, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.46%, the 94th percentile. No source names a fixed version.
References
labs.idefense.com/intelligence/vulnerabilities/display.php?id=427
securityfocus.com/bid/20663
exchange.xforce.ibmcloud.com/vulnerabilities/29764
secunia.com/advisories/22506
securitytracker.com/id?1017104
vupen.com/english/advisories/2006/4142
nvd.nist.gov/vuln/detail/CVE-2006-4509
github.com/advisories/GHSA-52fc-3qh4-mv68