TUCoPS :: Networks :: bx3719.htm

TUCoPS :: Networks :: bx3719.htm
Novell eDirectory dhost Integer Overflow Code
ZDI-08-041: Novell eDirectory dhost Integer Overflow Code Execution Vulnerability ZDI-08-041: Novell eDirectory dhost Integer Overflow Code Execution Vulnerability
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