CVE-2006-4520
ncp in Novell eDirectory before 8.7.3 SP9, and 8.8.x before 8.8.1 FTF2, does not properly handle...
ncp in Novell eDirectory before 8.7.3 SP9, and 8.8.x before 8.8.1 FTF2, does not properly handle NCP fragments with a negative length, which allows remote attackers to cause a denial of service (daemon crash) when the heap is written to a log file.
Exploit likelihood
What each source reports
NVD Score used
ncp in Novell eDirectory before 8.7.3 SP9, and 8.8.x before 8.8.1 FTF2, does not properly handle NCP fragments with a negative length, which allows remote attackers to cause a denial of service (daemon crash) when the heap is written to a log file.
- Record
CVE-2006-4520- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Updated
- 2026-11-02
CVE List No score
ncp in Novell eDirectory before 8.7.3 SP9, and 8.8.x before 8.8.1 FTF2, does not properly handle NCP fragments with a negative length, which allows remote attackers to cause a denial of service (daemon crash) when the heap is written to a log file.
- Record
CVE-2006-4520- Updated
- 2026-11-02
EUVDEUVD-2006-4508 No score
ncp in Novell eDirectory before 8.7.3 SP9, and 8.8.x before 8.8.1 FTF2, does not properly handle NCP fragments with a negative length, which allows remote attackers to cause a denial of service (daemon crash) when the heap is written to a log file.
- Record
EUVD-2006-4508- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-ghvg-2p2w-w2hx No score
ncp in Novell eDirectory before 8.7.3 SP9, and 8.8.x before 8.8.1 FTF2, does not properly handle...
ncp in Novell eDirectory before 8.7.3 SP9, and 8.8.x before 8.8.1 FTF2, does not properly handle NCP fragments with a negative length, which allows remote attackers to cause a denial of service (daemon crash) when the heap is written to a log file.
- Record
GHSA-ghvg-2p2w-w2hx- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-4520 is a high vulnerability (CVSS 7.8) in Novell Edirectory, published April 30, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.93%, the 87th percentile. No source names a fixed version.
References
vupen.com/english/advisories/2007/1550
labs.idefense.com/intelligence/vulnerabilities/display.php?id=518
novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=3924657&sliceId=SAL_Public
securitytracker.com/id?1017972
securityfocus.com/bid/23685
exchange.xforce.ibmcloud.com/vulnerabilities/33921
nvd.nist.gov/vuln/detail/CVE-2006-4520
github.com/advisories/GHSA-ghvg-2p2w-w2hx