CVE-2008-1809
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
8 High
AI Score
Confidence
Low
0.822 High
EPSS
Percentile
98.4%
Heap-based buffer overflow in Novell eDirectory 8.7.3 before 8.7.3.10b, and 8.8 before 8.8.2 FTF2, allows remote attackers to execute arbitrary code via an LDAP search request containing βNULL search parameters.β
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| novell:edirectory | novell edirectory | eq | 8.7.3 |
| novell:edirectory | novell edirectory | eq | 8.8 |
References
labs.idefense.com/intelligence/vulnerabilities/display.php?id=724
secunia.com/advisories/31036
www.novell.com/support/viewContent.do?externalId=3843876
www.securityfocus.com/bid/30175
www.securitytracker.com/id?1020470
www.vupen.com/english/advisories/2008/2062/references
exchange.xforce.ibmcloud.com/vulnerabilities/43716
Related
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
8 High
AI Score
Confidence
Low
0.822 High
EPSS
Percentile
98.4%