CVE-2008-5038 Use-after-free vulnerability in the NetWare Core Protocol (NCP) feature in Novell eDirectory 8.7.3 SP10 before 8.7.3 SP10 FTF1 and 8.8 SP2 for Windows allows remote attackers to cause a denial of serv...
CriticalCVSS 9.8
EPSS 6.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Use-after-free vulnerability in the NetWare Core Protocol (NCP) feature in Novell eDirectory 8.7.3 SP10 before 8.7.3 SP10 FTF1 and 8.8 SP2 for Windows allows remote attackers to cause a denial of service and possibly execute arbitrary code via a sequence of "Get NCP Extension Information By Name" requests that cause one thread to operate on memory after it has been freed in another thread, which triggers memory corruption, aka Novell Bug 373852.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| novell edirectory | < 8.7.3 | 8.7.3 |
| novell edirectory | = 8.7.3-sp1 | No fix listed |
| novell edirectory | = 8.7.3-sp2 | No fix listed |
| novell edirectory | = 8.7.3-sp3 | No fix listed |
| novell edirectory | = 8.7.3-sp4 | No fix listed |
| novell edirectory | = 8.7.3-sp5 | No fix listed |
| novell edirectory | = 8.7.3-sp6 | No fix listed |
| novell edirectory | = 8.7.3-sp7 | No fix listed |
| novell edirectory | = 8.7.3-sp8 | No fix listed |
| novell edirectory | = 8.7.3-sp9 | No fix listed |
| novell edirectory | = 8.8 | No fix listed |
References
- 20081030 Novell eDirectory NCP Get Extension Information Request Memory Corruption Vulnerability broken-link third-party-advisory
- 48206 broken-link vdb-entry
- 32395 broken-link third-party-advisory vendor-advisory
- support.novell.com broken-link patch vendor-advisory
- support.novell.com broken-link patch
- www.novell.com broken-link
- 31956 broken-link third-party-advisory vdb-entry
- 1021117 broken-link third-party-advisory vdb-entry
- ADV-2008-2937 broken-link vdb-entry vendor-advisory
- novell-edirectory-ncp-unspecified(46138) third-party-advisory vdb-entry