Lucene search

[email protected]CVE-2008-5091

HistoryNov 14, 2008 - 7:20 p.m.

CVE-2008-5091

2008-11-1419:20:54

CWE-119

[email protected]

web.nvd.nist.gov

cve-2008-5091

novell edirectory

buffer overflow

ldap service

denial of service

nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.3 Medium

AI Score

Confidence

High

0.014 Low

EPSS

Percentile

86.4%

JSON

Buffer overflow in the LDAP Service in Novell eDirectory 8.7.3 before SP10a and 8.8 before SP3 allows attackers to cause a denial of service (application crash) via vectors involving an “invalid extensibleMatch filter.”

Affected configurations

NVD

Node

novelledirectoryRange≤8.8sp2windows

novelledirectoryMatch8.0

novelledirectoryMatch8.5

novelledirectoryMatch8.5.12a

novelledirectoryMatch8.5.27

novelledirectoryMatch8.6.2

novelledirectoryMatch8.7

novelledirectoryMatch8.7.1

novelledirectoryMatch8.7.1sp1

novelledirectoryMatch8.7.3

novelledirectoryMatch8.7.3sp1windows

novelledirectoryMatch8.7.3sp2windows

novelledirectoryMatch8.7.3sp3windows

novelledirectoryMatch8.7.3sp4windows

novelledirectoryMatch8.7.3sp6windows

novelledirectoryMatch8.7.3sp7windows

novelledirectoryMatch8.7.3sp8windows

novelledirectoryMatch8.7.3sp9windows

novelledirectoryMatch8.7.3.8

novelledirectoryMatch8.7.3.8_presp9

novelledirectoryMatch8.7.3.9

novelledirectoryMatch8.7.3.9linux

novelledirectoryMatch8.7.3.9solaris

novelledirectoryMatch8.7.3.9windows_2000

novelledirectoryMatch8.7.3.9windows_2003

novelledirectoryMatch8.7.3.10

novelledirectoryMatch8.8

novelledirectoryMatch8.8linux

novelledirectoryMatch8.8solaris

novelledirectoryMatch8.8windows_2000

novelledirectoryMatch8.8windows_2003

novelledirectoryMatch8.8.1

novelledirectoryMatch8.8.1linux

novelledirectoryMatch8.8.1solaris

novelledirectoryMatch8.8.1windows_2000

novelledirectoryMatch8.8.1windows_2003

novelledirectoryMatch8.8.2

novelledirectoryMatch8.8.2linux

novelledirectoryMatch8.8.2solaris

novelledirectoryMatch8.8.2windows_2000

novelledirectoryMatch8.8.2windows_2003

CPENameOperatorVersion
novell:edirectorynovell edirectoryle8.8
novell:edirectorynovell edirectoryeq8.0
novell:edirectorynovell edirectoryeq8.5
novell:edirectorynovell edirectoryeq8.5.12a
novell:edirectorynovell edirectoryeq8.5.27
novell:edirectorynovell edirectoryeq8.6.2
novell:edirectorynovell edirectoryeq8.7
novell:edirectorynovell edirectoryeq8.7.1
novell:edirectorynovell edirectoryeq8.7.3
novell:edirectorynovell edirectoryeq8.7.3.8

CPE	Name	Operator	Version
novell:edirectory	novell edirectory	le	8.8
novell:edirectory	novell edirectory	eq	8.0
novell:edirectory	novell edirectory	eq	8.5
novell:edirectory	novell edirectory	eq	8.5.12a
novell:edirectory	novell edirectory	eq	8.5.27
novell:edirectory	novell edirectory	eq	8.6.2
novell:edirectory	novell edirectory	eq	8.7
novell:edirectory	novell edirectory	eq	8.7.1
novell:edirectory	novell edirectory	eq	8.7.3
novell:edirectory	novell edirectory	eq	8.7.3.8

Rows per page:

1-10 of 151

References

www.novell.com/documentation/edir873/sp10_readme/netware/readme.txt

www.novell.com/support/viewContent.do?externalId=3426981

www.novell.com/support/viewContent.do?externalId=3477912

www.securityfocus.com/bid/30947

www.securitytracker.com/id?1020788

www.vupen.com/english/advisories/2008/2462

bugzilla.novell.com/show_bug.cgi?id=373853

exchange.xforce.ibmcloud.com/vulnerabilities/43590

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.3 Medium

AI Score

Confidence

High

0.014 Low

EPSS

Percentile

86.4%

JSON

Related for CVE-2008-5091

cvelist1 nvd1 prion1 openvas8 nessus1