Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

novell edirectory 8.5.12a vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2006-5479
The NCP Engine in Novell eDirectory prior to 8.7.3.8 FTF1 allows remote malicious users to cause an unspecified denial of service via a certain "NCP Fragment."
Novell Edirectory 8.5Novell Edirectory 8.5.12aNovell Edirectory 8.5.27Novell Edirectory 8.6.2Novell Edirectory 8.0Novell Edirectory 8.7Novell Edirectory 8.7.1Novell EdirectoryNovell Edirectory 8.7.3
7.5
CVSSv2
CVE-2006-5478
Multiple stack-based buffer overflows in Novell eDirectory 8.8.x prior to 8.8.1 FTF1, and 8.x up to 8.7.3.8, and Novell NetMail prior to 3.52e FTF2, allow remote malicious users to execute arbitrary code via (1) a long HTTP Host header, which triggers an overflow in the BuildRedi...
Novell Edirectory 8.5.27Novell Edirectory 8.6.2Novell Edirectory 8.7Novell Edirectory 8.7.1Novell Edirectory 8.0Novell Edirectory 8.7.3Novell Edirectory 8.5Novell Edirectory 8.5.12aNovell Edirectory 8.7.3.8 Presp9
5
CVSSv2
CVE-2010-0666
Unspecified vulnerability in eMBox in Novell eDirectory 8.8 SP5 Patch 2 and previous versions allows remote malicious users to cause a denial of service (crash) via unknown a crafted SOAP request, a different issue than CVE-2008-0926.
Novell Edirectory 8.8Novell Edirectory 8.5.12aNovell Edirectory 8.7.3.8Novell Edirectory 8.7.3.9Novell EdirectoryNovell Edirectory 8.6.2Novell Edirectory 8.7Novell Edirectory 8.7.1Novell Edirectory 8.5Novell Edirectory 8.5.27Novell Edirectory 8.7.3Novell Edirectory 8.7.3.8 Presp9
7.5
CVSSv2
CVE-2008-0926
The SOAP interface to the eMBox module in Novell eDirectory 8.7.3.9 and previous versions, and 8.8.x prior to 8.8.2, relies on client-side authentication, which allows remote malicious users to bypass authentication via requests for /SOAP URIs, and cause a denial of service (daem...
Novell Edirectory 8.5.27Novell Edirectory 8.6.2Novell Edirectory 8.7Novell Edirectory 8.8Novell EdirectoryNovell Edirectory 8.7.1Novell Edirectory 8.5Novell Edirectory 8.5.12aNovell Edirectory 8.7.3.8 Presp9Novell Edirectory 8.7.3.9Novell Edirectory 8.7.3Novell Edirectory 8.7.3.8
4.3
CVSSv2
CVE-2008-5093
Cross-site scripting (XSS) vulnerability in the HTTP Protocol Stack (HTTPSTK) in Novell eDirectory prior to 8.8 SP3 allows remote malicious users to inject arbitrary web script or HTML via unknown vectors.
Novell Edirectory 8.8Novell Edirectory 8.8.2Novell Edirectory 8.8.1Novell Edirectory 8.7.3Novell Edirectory 8.7.3.9Novell Edirectory 8.7.1Novell Edirectory 8.7Novell EdirectoryNovell Edirectory 8.7.3.8 Presp9Novell Edirectory 8.6.2Novell Edirectory 8.5.27Novell Edirectory 8.7.3.8Novell Edirectory 8.7.3.10Novell Edirectory 8.5.12aNovell Edirectory 8.0
10
CVSSv2
CVE-2008-5094
Heap-based buffer overflow in the NDS Service in Novell eDirectory prior to 8.8 SP3 has unknown impact and attack vectors.
Novell EdirectoryNovell Edirectory 8.8Novell Edirectory 8.8.2Novell Edirectory 8.8.1Novell Edirectory 8.7.3Novell Edirectory 8.7.3.9Novell Edirectory 8.7.1Novell Edirectory 8.7Novell Edirectory 8.7.3.8 Presp9Novell Edirectory 8.6.2Novell Edirectory 8.5.27Novell Edirectory 8.5.12aNovell Edirectory 8.7.3.8Novell Edirectory 8.7.3.10Novell Edirectory 8.0
10
CVSSv2
CVE-2008-5091
Buffer overflow in the LDAP Service in Novell eDirectory 8.7.3 before SP10a and 8.8 before SP3 allows malicious users to cause a denial of service (application crash) via vectors involving an "invalid extensibleMatch filter."
Novell Edirectory 8.8Novell Edirectory 8.8.1Novell Edirectory 8.8.2Novell Edirectory 8.7.1Novell Edirectory 8.7.3Novell Edirectory 8.7.3.9Novell EdirectoryNovell Edirectory 8.7Novell Edirectory 8.6.2Novell Edirectory 8.7.3.10Novell Edirectory 8.7.3.8Novell Edirectory 8.0Novell Edirectory 8.5Novell Edirectory 8.7.3.8 Presp9Novell Edirectory 8.5.12aNovell Edirectory 8.5.27
10
CVSSv2
CVE-2008-5092
Heap-based buffer overflows in Novell eDirectory HTTP protocol stack (HTTPSTK) prior to 8.8 SP3 have unknown impact and attack vectors related to the (1) HTTP language header and (2) HTTP content-length header.
Novell Edirectory 8.8.1Novell Edirectory 8.8Novell Edirectory 8.7.3Novell Edirectory 8.7.3.9Novell Edirectory 8.6.2Novell Edirectory 8.7Novell Edirectory 85.20Novell Edirectory 8.8.2Novell Edirectory 8.5.12aNovell Edirectory 8.5.27Novell Edirectory 8.7.3.10Novell Edirectory 8.7.1Novell EdirectoryNovell Edirectory 8.7.3.8Novell Edirectory 8.7.3.8 Presp9Novell Edirectory 8.0Novell Edirectory 8.5
5
CVSSv2
CVE-2004-0112
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote malicious users to cause a denial of service (crash) via a crafted SSL/TLS handshak...
Cisco Firewall Services ModuleSymantec Clientless Vpn Gateway 4400 5.0Hp Apache-based Web Server 2.0.43.00Cisco Firewall Services Module 1.1.3Cisco Firewall Services Module 1.1.2Hp Aaa ServerCisco Firewall Services Module 1.1 \\(3.005\\)Hp Apache-based Web Server 2.0.43.04Cisco Firewall Services Module 2.1 \\(0.208\\)Avaya Sg203 4.4Hp Hp-ux 11.11Redhat Enterprise Linux Desktop 3.0Hp Hp-ux 11.23Cisco Ciscoworks Common Management Foundation 2.1Freebsd Freebsd 5.1Avaya Sg208 4.4Redhat Enterprise Linux 3.0Avaya Sg200 4.4Avaya Sg5 4.4Redhat Linux 7.2Cisco Ciscoworks Common Services 2.2Openbsd Openbsd 3.3
5
CVSSv2
CVE-2004-0079
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote malicious users to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
Cisco Firewall Services ModuleSymantec Clientless Vpn Gateway 4400 5.0Hp Apache-based Web Server 2.0.43.00Cisco Firewall Services Module 1.1.3Cisco Firewall Services Module 1.1.2Hp Aaa ServerCisco Firewall Services Module 1.1 \\(3.005\\)Hp Apache-based Web Server 2.0.43.04Cisco Firewall Services Module 2.1 \\(0.208\\)Avaya Sg203 4.4Hp Hp-ux 11.11Redhat Enterprise Linux Desktop 3.0Hp Hp-ux 11.23Cisco Ciscoworks Common Management Foundation 2.1Freebsd Freebsd 5.1Avaya Sg208 4.4Redhat Enterprise Linux 3.0Avaya Sg200 4.4Avaya Sg5 4.4Redhat Linux 7.2Cisco Ciscoworks Common Services 2.2Openbsd Openbsd 3.3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook