CVE-2004-1236 Buffer overflow in the LDAP component for Netscape Directory Server (NDS) 3.6 on HP-UX and other operating systems allows remote attackers to execute arbitrary code.

HighCVSS 10.0 EPSS 8.9%

Published: 2005-01-06 07:00
Updated: 2026-06-17 01:07
Exploit status: No public exploit known

Description

Buffer overflow in the LDAP component for Netscape Directory Server (NDS) 3.6 on HP-UX and other operating systems allows remote attackers to execute arbitrary code.

Affected products

Product	Affected versions	Fixed in
netscape directory server	= 3.6	No fix listed

References

SSRT4867 vendor-advisory
14960 third-party-advisory
57754 vendor-advisory
P-083 government-resource third-party-advisory
VU#258905 third-party-advisory us-government-resource
12099 vdb-entry
nds-ldap-bo(18676) vdb-entry

CVSS v2.0

10.0 High

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Complete
Integrity: Complete
Availability: Complete

Weakness & likelihood

EPSS (exploitation probability, 30 days): 8.85% (percentile 95.3)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.