CVE-2006-4510
The evtFilteredMonitorEventsRequest function in the LDAP service in Novell eDirectory before 8.8...
The evtFilteredMonitorEventsRequest function in the LDAP service in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted request containing a value that is larger than the number of objects transmitted, which triggers an invalid free of unallocated memory.
Exploit likelihood
What each source reports
NVD Score used
10.0
The evtFilteredMonitorEventsRequest function in the LDAP service in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted request containing a value that is larger than the number of objects transmitted, which triggers an invalid free of unallocated memory.
- Record
CVE-2006-4510- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
The evtFilteredMonitorEventsRequest function in the LDAP service in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted request containing a value that is larger than the number of objects transmitted, which triggers an invalid free of unallocated memory.
- Record
CVE-2006-4510- Updated
- 2026-11-02
EUVDEUVD-2006-4498 No score
The evtFilteredMonitorEventsRequest function in the LDAP service in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted request containing a value that is larger than the number of objects transmitted, which triggers an invalid free of unallocated memory.
- Record
EUVD-2006-4498- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g5q4-52w8-jq3w No score
The evtFilteredMonitorEventsRequest function in the LDAP service in Novell eDirectory before 8.8...
The evtFilteredMonitorEventsRequest function in the LDAP service in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted request containing a value that is larger than the number of objects transmitted, which triggers an invalid free of unallocated memory.
- Record
GHSA-g5q4-52w8-jq3w- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-4510 is a high vulnerability (CVSS 10.0) in Novell Edirectory, published October 24, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.49%, the 93rd percentile. No source names a fixed version.
References
securityfocus.com/bid/20663
exchange.xforce.ibmcloud.com/vulnerabilities/29752
labs.idefense.com/intelligence/vulnerabilities/display.php?id=428
secunia.com/advisories/22506
securitytracker.com/id?1017104
vupen.com/english/advisories/2006/4142
nvd.nist.gov/vuln/detail/CVE-2006-4510
github.com/advisories/GHSA-g5q4-52w8-jq3w