Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

novell edirectory 8.7.1 vulnerabilities and exploits

(subscribe to this query)
4.9
CVSSv2
CVE-2006-4185
Unspecified vulnerability in the NCPENGINE in Novell eDirectory 8.7.3.8 allows local users to cause a denial of service (CPU consumption) via unspecified vectors, as originally demonstrated using a Nessus scan.
Novell Edirectory 8.7Novell Edirectory 8.7.1Novell Edirectory 8.7.3Novell Edirectory 8.7.3.8
5
CVSSv2
CVE-2006-5479
The NCP Engine in Novell eDirectory prior to 8.7.3.8 FTF1 allows remote malicious users to cause an unspecified denial of service via a certain "NCP Fragment."
Novell Edirectory 8.5Novell Edirectory 8.5.12aNovell Edirectory 8.5.27Novell Edirectory 8.6.2Novell Edirectory 8.0Novell Edirectory 8.7Novell Edirectory 8.7.1Novell EdirectoryNovell Edirectory 8.7.3
7.5
CVSSv2
CVE-2006-5478
Multiple stack-based buffer overflows in Novell eDirectory 8.8.x prior to 8.8.1 FTF1, and 8.x up to 8.7.3.8, and Novell NetMail prior to 3.52e FTF2, allow remote malicious users to execute arbitrary code via (1) a long HTTP Host header, which triggers an overflow in the BuildRedi...
Novell Edirectory 8.5.27Novell Edirectory 8.6.2Novell Edirectory 8.7Novell Edirectory 8.7.1Novell Edirectory 8.0Novell Edirectory 8.7.3Novell Edirectory 8.5Novell Edirectory 8.5.12aNovell Edirectory 8.7.3.8 Presp9
10
CVSSv2
CVE-2008-4478
Multiple integer overflows in dhost.exe in Novell eDirectory 8.8 prior to 8.8.3, and 8.73 prior to 8.7.3.10 ftf1, allow remote malicious users to execute arbitrary code via a crafted (1) Content-Length header in a SOAP request or (2) Netware Core Protocol opcode 0x0F message, whi...
Novell Edirectory 8.8.1Novell Edirectory 8.8Novell Edirectory 8.7.3.9Novell Edirectory 8.8.2Novell Edirectory 8.7.3.8Novell Edirectory 8.7.3.8 Presp9Novell Edirectory 8.7.1Novell Edirectory 8.7.3Novell EdirectoryNovell Edirectory 8.7
5
CVSSv2
CVE-2010-0666
Unspecified vulnerability in eMBox in Novell eDirectory 8.8 SP5 Patch 2 and previous versions allows remote malicious users to cause a denial of service (crash) via unknown a crafted SOAP request, a different issue than CVE-2008-0926.
Novell Edirectory 8.8Novell Edirectory 8.5.12aNovell Edirectory 8.7.3.8Novell Edirectory 8.7.3.9Novell EdirectoryNovell Edirectory 8.6.2Novell Edirectory 8.7Novell Edirectory 8.7.1Novell Edirectory 8.5Novell Edirectory 8.5.27Novell Edirectory 8.7.3Novell Edirectory 8.7.3.8 Presp9
7.5
CVSSv2
CVE-2008-0926
The SOAP interface to the eMBox module in Novell eDirectory 8.7.3.9 and previous versions, and 8.8.x prior to 8.8.2, relies on client-side authentication, which allows remote malicious users to bypass authentication via requests for /SOAP URIs, and cause a denial of service (daem...
Novell Edirectory 8.5.27Novell Edirectory 8.6.2Novell Edirectory 8.7Novell Edirectory 8.8Novell EdirectoryNovell Edirectory 8.7.1Novell Edirectory 8.5Novell Edirectory 8.5.12aNovell Edirectory 8.7.3.8 Presp9Novell Edirectory 8.7.3.9Novell Edirectory 8.7.3Novell Edirectory 8.7.3.8
4.3
CVSSv2
CVE-2008-5093
Cross-site scripting (XSS) vulnerability in the HTTP Protocol Stack (HTTPSTK) in Novell eDirectory prior to 8.8 SP3 allows remote malicious users to inject arbitrary web script or HTML via unknown vectors.
Novell Edirectory 8.8Novell Edirectory 8.8.2Novell Edirectory 8.8.1Novell Edirectory 8.7.3Novell Edirectory 8.7.3.9Novell Edirectory 8.7.1Novell Edirectory 8.7Novell EdirectoryNovell Edirectory 8.7.3.8 Presp9Novell Edirectory 8.6.2Novell Edirectory 8.5.27Novell Edirectory 8.7.3.8Novell Edirectory 8.7.3.10Novell Edirectory 8.5.12aNovell Edirectory 8.0
10
CVSSv2
CVE-2008-5094
Heap-based buffer overflow in the NDS Service in Novell eDirectory prior to 8.8 SP3 has unknown impact and attack vectors.
Novell EdirectoryNovell Edirectory 8.8Novell Edirectory 8.8.2Novell Edirectory 8.8.1Novell Edirectory 8.7.3Novell Edirectory 8.7.3.9Novell Edirectory 8.7.1Novell Edirectory 8.7Novell Edirectory 8.7.3.8 Presp9Novell Edirectory 8.6.2Novell Edirectory 8.5.27Novell Edirectory 8.5.12aNovell Edirectory 8.7.3.8Novell Edirectory 8.7.3.10Novell Edirectory 8.0
10
CVSSv2
CVE-2008-5091
Buffer overflow in the LDAP Service in Novell eDirectory 8.7.3 before SP10a and 8.8 before SP3 allows malicious users to cause a denial of service (application crash) via vectors involving an "invalid extensibleMatch filter."
Novell Edirectory 8.8Novell Edirectory 8.8.1Novell Edirectory 8.8.2Novell Edirectory 8.7.1Novell Edirectory 8.7.3Novell Edirectory 8.7.3.9Novell EdirectoryNovell Edirectory 8.7Novell Edirectory 8.6.2Novell Edirectory 8.7.3.10Novell Edirectory 8.7.3.8Novell Edirectory 8.0Novell Edirectory 8.5Novell Edirectory 8.7.3.8 Presp9Novell Edirectory 8.5.12aNovell Edirectory 8.5.27
10
CVSSv2
CVE-2008-5092
Heap-based buffer overflows in Novell eDirectory HTTP protocol stack (HTTPSTK) prior to 8.8 SP3 have unknown impact and attack vectors related to the (1) HTTP language header and (2) HTTP content-length header.
Novell Edirectory 8.8.1Novell Edirectory 8.8Novell Edirectory 8.7.3Novell Edirectory 8.7.3.9Novell Edirectory 8.6.2Novell Edirectory 8.7Novell Edirectory 85.20Novell Edirectory 8.8.2Novell Edirectory 8.5.12aNovell Edirectory 8.5.27Novell Edirectory 8.7.3.10Novell Edirectory 8.7.1Novell EdirectoryNovell Edirectory 8.7.3.8Novell Edirectory 8.7.3.8 Presp9Novell Edirectory 8.0Novell Edirectory 8.5
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook