CVE-2008-5091 Buffer overflow in the LDAP Service in Novell eDirectory 8.7.3 before SP10a and 8.8 before SP3 allows attackers to cause a denial of service (application crash) via vectors involving an "invalid exten...
HighCVSS 10.0
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the LDAP Service in Novell eDirectory 8.7.3 before SP10a and 8.8 before SP3 allows attackers to cause a denial of service (application crash) via vectors involving an "invalid extensibleMatch filter."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| novell edirectory | <= 8.8 | No fix listed |
| novell edirectory | = 8.0 | No fix listed |
| novell edirectory | = 8.5 | No fix listed |
| novell edirectory | = 8.5.12a | No fix listed |
| novell edirectory | = 8.5.27 | No fix listed |
| novell edirectory | = 8.6.2 | No fix listed |
| novell edirectory | = 8.7 | No fix listed |
| novell edirectory | = 8.7.1 | No fix listed |
| novell edirectory | = 8.7.1-sp1 | No fix listed |
| novell edirectory | = 8.7.3 | No fix listed |
| novell edirectory | = 8.7.3-sp1 | No fix listed |
| novell edirectory | = 8.7.3-sp2 | No fix listed |
| novell edirectory | = 8.7.3-sp3 | No fix listed |
| novell edirectory | = 8.7.3-sp4 | No fix listed |
| novell edirectory | = 8.7.3-sp6 | No fix listed |
| novell edirectory | = 8.7.3-sp7 | No fix listed |
| novell edirectory | = 8.7.3-sp8 | No fix listed |
| novell edirectory | = 8.7.3-sp9 | No fix listed |
| novell edirectory | = 8.7.3.8 | No fix listed |
| novell edirectory | = 8.7.3.8_presp9 | No fix listed |
| novell edirectory | = 8.7.3.9 | No fix listed |
| novell edirectory | = 8.7.3.10 | No fix listed |
| novell edirectory | = 8.8 | No fix listed |
| novell edirectory | = 8.8.1 | No fix listed |
| novell edirectory | = 8.8.2 | No fix listed |
References
- www.novell.com vendor-advisory
- www.novell.com vendor-advisory
- www.novell.com
- 30947 vdb-entry
- 1020788 vdb-entry
- ADV-2008-2462 vdb-entry
- bugzilla.novell.com
- novell-edirectory-extensiblematch-dos(43590) vdb-entry