critical10.0
CVE-2009-0895
Integer overflow in Novell eDirectory 8.7.3.x before 8.7.3.10 ftf2 and 8.8.x before 8.8.5.2 allows remote attackers to execute arbitrary code via an NDS Verb 0…
Impact
Integer overflow in Novell eDirectory 8.7.3.x before 8.7.3.10 ftf2 and 8.8.x before 8.8.5.2 allows remote attackers to execute arbitrary code via an NDS Verb 0x1 request containing a large integer value that triggers a heap-based buffer overflow.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Novell | Edirectory | Versions 8.7.3, 8.7.3.8, 8.7.3.9, 8.7.3.10, 8.8, 8.8.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/37554
- http://www.iss.net/threats/356.html
- http://www.novell.com/support/viewContent.do?externalId=7004912
- http://www.securityfocus.com/bid/37184
- http://www.vupen.com/english/advisories/2009/3379
- https://bugzilla.novell.com/show_bug.cgi?id=524344
- https://bugzilla.novell.com/show_bug.cgi?id=545887
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50616
- http://secunia.com/advisories/37554
- http://www.iss.net/threats/356.html
- http://www.novell.com/support/viewContent.do?externalId=7004912
- http://www.securityfocus.com/bid/37184
- http://www.vupen.com/english/advisories/2009/3379
- https://bugzilla.novell.com/show_bug.cgi?id=524344
- https://bugzilla.novell.com/show_bug.cgi?id=545887
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50616