Lucene search

K
cve[email protected]CVE-2009-2457
HistoryJul 14, 2009 - 8:30 p.m.

CVE-2009-2457

2009-07-1420:30:00
CWE-94
web.nvd.nist.gov
26
cve-2009-2457
novell edirectory
denial of service
ds\ndsd
ldap
security vulnerability

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.6 Medium

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.7%

The DS\NDSD component in Novell eDirectory 8.8 before SP5 allows remote attackers to cause a denial of service (crash) via a malformed bind LDAP packet.

Affected configurations

NVD
Node
novelledirectoryMatch8.8
OR
novelledirectoryMatch8.8sp1
OR
novelledirectoryMatch8.8sp2
OR
novelledirectoryMatch8.8sp3
OR
novelledirectoryMatch8.8sp3ftf3
OR
novelledirectoryMatch8.8sp4

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.6 Medium

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.7%

Related for CVE-2009-2457