CVE-2012-0429

2012-12-2512:13:04

[email protected]

web.nvd.nist.gov

netiq

edirectory

cve-2012-0429

denial of service

daemon crash

nvd

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

6.3 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.1%

JSON

dhost in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 on Windows allows remote authenticated users to cause a denial of service (daemon crash) via crafted characters in an HTTP request.

Affected configurations

NVD

Node

microfocusedirectoryMatch8.8.6.0-windows

microfocusedirectoryMatch8.8.6.1-windows

microfocusedirectoryMatch8.8.6.2-windows

microfocusedirectoryMatch8.8.6.3-windows

microfocusedirectoryMatch8.8.6.4-windows

microfocusedirectoryMatch8.8.6.5-windows

microfocusedirectoryMatch8.8.6.6-windows

Node

microfocusedirectoryMatch8.8.7.0-windows

microfocusedirectoryMatch8.8.7.1-windows

CPENameOperatorVersion
microfocus:edirectorymicrofocus edirectoryeq8.8.6.0
microfocus:edirectorymicrofocus edirectoryeq8.8.6.1
microfocus:edirectorymicrofocus edirectoryeq8.8.6.2
microfocus:edirectorymicrofocus edirectoryeq8.8.6.3
microfocus:edirectorymicrofocus edirectoryeq8.8.6.4
microfocus:edirectorymicrofocus edirectoryeq8.8.6.5
microfocus:edirectorymicrofocus edirectoryeq8.8.6.6

CPE	Name	Operator	Version
microfocus:edirectory	microfocus edirectory	eq	8.8.6.0
microfocus:edirectory	microfocus edirectory	eq	8.8.6.1
microfocus:edirectory	microfocus edirectory	eq	8.8.6.2
microfocus:edirectory	microfocus edirectory	eq	8.8.6.3
microfocus:edirectory	microfocus edirectory	eq	8.8.6.4
microfocus:edirectory	microfocus edirectory	eq	8.8.6.5
microfocus:edirectory	microfocus edirectory	eq	8.8.6.6