Core Security Technologies Advisory – A memory corruption vulnerability was found in Mac OSX Directory Service. By sending a maliciously crafted message, a remote attacker could cause the directory server to terminate or execute arbitrary code with system privileges.
The rest is here:
Mac OSX Server DirectoryService Buffer Overflow