CVE-2008-5092 Heap-based buffer overflows in Novell eDirectory HTTP protocol stack (HTTPSTK) before 8.8 SP3 have unknown impact and attack vectors related to the (1) HTTP language header and (2) HTTP content-length...
HighCVSS 10.0
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflows in Novell eDirectory HTTP protocol stack (HTTPSTK) before 8.8 SP3 have unknown impact and attack vectors related to the (1) HTTP language header and (2) HTTP content-length header.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| novell edirectory | <= 8.8 | No fix listed |
| novell edirectory | = 8.0 | No fix listed |
| novell edirectory | = 8.5 | No fix listed |
| novell edirectory | = 8.5.12a | No fix listed |
| novell edirectory | = 8.5.27 | No fix listed |
| novell edirectory | = 8.6.2 | No fix listed |
| novell edirectory | = 8.7 | No fix listed |
| novell edirectory | = 8.7.1 | No fix listed |
| novell edirectory | = 8.7.1-sp1 | No fix listed |
| novell edirectory | = 8.7.3 | No fix listed |
| novell edirectory | = 8.7.3-sp1 | No fix listed |
| novell edirectory | = 8.7.3-sp2 | No fix listed |
| novell edirectory | = 8.7.3-sp3 | No fix listed |
| novell edirectory | = 8.7.3-sp4 | No fix listed |
| novell edirectory | = 8.7.3-sp5 | No fix listed |
| novell edirectory | = 8.7.3-sp6 | No fix listed |
| novell edirectory | = 8.7.3-sp7 | No fix listed |
| novell edirectory | = 8.7.3-sp8 | No fix listed |
| novell edirectory | = 8.7.3-sp9 | No fix listed |
| novell edirectory | = 8.7.3.8 | No fix listed |
| novell edirectory | = 8.7.3.8_presp9 | No fix listed |
| novell edirectory | = 8.7.3.9 | No fix listed |
| novell edirectory | = 8.7.3.10 | No fix listed |
| novell edirectory | = 8.8 | No fix listed |
| novell edirectory | = 8.8.1 | No fix listed |
Show 2 more
| Product | Affected versions | Fixed in |
|---|---|---|
| novell edirectory | = 8.8.2 | No fix listed |
| novell edirectory | = 85.20 | No fix listed |
References
- www.novell.com vendor-advisory
- 30947 vdb-entry
- 1020786 vdb-entry
- ADV-2008-2462 vdb-entry