CVE-2008-0926

2008-03-2818:44:00

CWE-287

[email protected]

web.nvd.nist.gov

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.353

Percentile

97.2%

JSON

The SOAP interface to the eMBox module in Novell eDirectory 8.7.3.9 and earlier, and 8.8.x before 8.8.2, relies on client-side authentication, which allows remote attackers to bypass authentication via requests for /SOAP URIs, and cause a denial of service (daemon shutdown) or read arbitrary files. NOTE: it was later reported that 8.7.3.10 (aka 8.7.3 SP10) is also affected.

Affected configurations

Nvd

Node

novelledirectoryRange≤8.7.3.10

novelledirectoryMatch8.5

novelledirectoryMatch8.5.12a

novelledirectoryMatch8.5.27

novelledirectoryMatch8.6.2

novelledirectoryMatch8.7

novelledirectoryMatch8.7.1

novelledirectoryMatch8.7.1sp1

novelledirectoryMatch8.7.3

novelledirectoryMatch8.7.3.8

novelledirectoryMatch8.7.3.8_presp9

novelledirectoryMatch8.7.3.9

novelledirectoryMatch8.8

VendorProductVersionCPE
novelledirectory*cpe:2.3:a:novell:edirectory:*:*:*:*:*:*:*:*
novelledirectory8.5cpe:2.3:a:novell:edirectory:8.5:*:*:*:*:*:*:*
novelledirectory8.5.12acpe:2.3:a:novell:edirectory:8.5.12a:*:*:*:*:*:*:*
novelledirectory8.5.27cpe:2.3:a:novell:edirectory:8.5.27:*:*:*:*:*:*:*
novelledirectory8.6.2cpe:2.3:a:novell:edirectory:8.6.2:*:*:*:*:*:*:*
novelledirectory8.7cpe:2.3:a:novell:edirectory:8.7:*:*:*:*:*:*:*
novelledirectory8.7.1cpe:2.3:a:novell:edirectory:8.7.1:*:*:*:*:*:*:*
novelledirectory8.7.1cpe:2.3:a:novell:edirectory:8.7.1:sp1:*:*:*:*:*:*
novelledirectory8.7.3cpe:2.3:a:novell:edirectory:8.7.3:*:*:*:*:*:*:*
novelledirectory8.7.3.8cpe:2.3:a:novell:edirectory:8.7.3.8:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
novell	edirectory	*	cpe:2.3:a:novell:edirectory::::::::
novell	edirectory	8.5	cpe:2.3:a:novell:edirectory:8.5:::::::*
novell	edirectory	8.5.12a	cpe:2.3:a:novell:edirectory:8.5.12a:::::::*
novell	edirectory	8.5.27	cpe:2.3:a:novell:edirectory:8.5.27:::::::*
novell	edirectory	8.6.2	cpe:2.3:a:novell:edirectory:8.6.2:::::::*
novell	edirectory	8.7	cpe:2.3:a:novell:edirectory:8.7:::::::*
novell	edirectory	8.7.1	cpe:2.3:a:novell:edirectory:8.7.1:::::::*
novell	edirectory	8.7.1	cpe:2.3:a:novell:edirectory:8.7.1:sp1::::::
novell	edirectory	8.7.3	cpe:2.3:a:novell:edirectory:8.7.3:::::::*
novell	edirectory	8.7.3.8	cpe:2.3:a:novell:edirectory:8.7.3.8:::::::*