Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

novell edirectory 8.8.2 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2008-0925
Cross-site scripting (XSS) vulnerability in the iMonitor interface in Novell eDirectory 8.7.3.x prior to 8.7.3 sp10, and 8.8.x prior to 8.8.2 ftf2, allows remote malicious users to inject arbitrary web script or HTML via unspecified parameters that are used within "error mes...
Novell Edirectory 8.8.1Novell Edirectory 8.8Novell Edirectory 8.7.3.9Novell Edirectory 8.8.2
5
CVSSv2
CVE-2009-3862
The NDSD process in Novell eDirectory 8.7.3 prior to 8.7.3.10 ftf2 and eDirectory 8.8 prior to 8.8.5 ftf1 does not properly handle certain LDAP search requests, which allows remote malicious users to cause a denial of service (application hang) via a search request with a NULL Ba...
Novell Edirectory 8.7.3Novell Edirectory 8.8Novell Edirectory 8.8.1Novell Edirectory 8.8.2Novell Edirectory 8.7.3.8Novell Edirectory 8.7.3.9
10
CVSSv2
CVE-2009-0895
Integer overflow in Novell eDirectory 8.7.3.x prior to 8.7.3.10 ftf2 and 8.8.x prior to 8.8.5.2 allows remote malicious users to execute arbitrary code via an NDS Verb 0x1 request containing a large integer value that triggers a heap-based buffer overflow.
Novell Edirectory 8.7.3Novell Edirectory 8.8Novell Edirectory 8.7.3.10Novell Edirectory 8.7.3.8Novell Edirectory 8.8.5Novell Edirectory 8.8.1Novell Edirectory 8.8.2Novell Edirectory 8.7.3.9
10
CVSSv2
CVE-2008-4478
Multiple integer overflows in dhost.exe in Novell eDirectory 8.8 prior to 8.8.3, and 8.73 prior to 8.7.3.10 ftf1, allow remote malicious users to execute arbitrary code via a crafted (1) Content-Length header in a SOAP request or (2) Netware Core Protocol opcode 0x0F message, whi...
Novell Edirectory 8.8.1Novell Edirectory 8.8Novell Edirectory 8.7.3.9Novell Edirectory 8.8.2Novell Edirectory 8.7.3.8Novell Edirectory 8.7.3.8 Presp9Novell Edirectory 8.7.1Novell Edirectory 8.7.3Novell EdirectoryNovell Edirectory 8.7
5
CVSSv2
CVE-2008-1777
The eDirectory Host Environment service (dhost.exe) in Novell eDirectory 8.8.2 allows remote malicious users to cause a denial of service (CPU consumption) via a long HTTP HEAD request to TCP port 8028.
Novell Edirectory 8.8.2
4.3
CVSSv2
CVE-2008-5093
Cross-site scripting (XSS) vulnerability in the HTTP Protocol Stack (HTTPSTK) in Novell eDirectory prior to 8.8 SP3 allows remote malicious users to inject arbitrary web script or HTML via unknown vectors.
Novell Edirectory 8.8Novell Edirectory 8.8.2Novell Edirectory 8.8.1Novell Edirectory 8.7.3Novell Edirectory 8.7.3.9Novell Edirectory 8.7.1Novell Edirectory 8.7Novell EdirectoryNovell Edirectory 8.7.3.8 Presp9Novell Edirectory 8.6.2Novell Edirectory 8.5.27Novell Edirectory 8.7.3.8Novell Edirectory 8.7.3.10Novell Edirectory 8.5.12aNovell Edirectory 8.0
10
CVSSv2
CVE-2008-5094
Heap-based buffer overflow in the NDS Service in Novell eDirectory prior to 8.8 SP3 has unknown impact and attack vectors.
Novell EdirectoryNovell Edirectory 8.8Novell Edirectory 8.8.2Novell Edirectory 8.8.1Novell Edirectory 8.7.3Novell Edirectory 8.7.3.9Novell Edirectory 8.7.1Novell Edirectory 8.7Novell Edirectory 8.7.3.8 Presp9Novell Edirectory 8.6.2Novell Edirectory 8.5.27Novell Edirectory 8.5.12aNovell Edirectory 8.7.3.8Novell Edirectory 8.7.3.10Novell Edirectory 8.0
10
CVSSv2
CVE-2008-5091
Buffer overflow in the LDAP Service in Novell eDirectory 8.7.3 before SP10a and 8.8 before SP3 allows malicious users to cause a denial of service (application crash) via vectors involving an "invalid extensibleMatch filter."
Novell Edirectory 8.8Novell Edirectory 8.8.1Novell Edirectory 8.8.2Novell Edirectory 8.7.1Novell Edirectory 8.7.3Novell Edirectory 8.7.3.9Novell EdirectoryNovell Edirectory 8.7Novell Edirectory 8.6.2Novell Edirectory 8.7.3.10Novell Edirectory 8.7.3.8Novell Edirectory 8.0Novell Edirectory 8.5Novell Edirectory 8.7.3.8 Presp9Novell Edirectory 8.5.12aNovell Edirectory 8.5.27
10
CVSSv2
CVE-2008-5092
Heap-based buffer overflows in Novell eDirectory HTTP protocol stack (HTTPSTK) prior to 8.8 SP3 have unknown impact and attack vectors related to the (1) HTTP language header and (2) HTTP content-length header.
Novell Edirectory 8.8.1Novell Edirectory 8.8Novell Edirectory 8.7.3Novell Edirectory 8.7.3.9Novell Edirectory 8.6.2Novell Edirectory 8.7Novell Edirectory 85.20Novell Edirectory 8.8.2Novell Edirectory 8.5.12aNovell Edirectory 8.5.27Novell Edirectory 8.7.3.10Novell Edirectory 8.7.1Novell EdirectoryNovell Edirectory 8.7.3.8Novell Edirectory 8.7.3.8 Presp9Novell Edirectory 8.0Novell Edirectory 8.5
7.5
CVSSv2
CVE-2008-0926
The SOAP interface to the eMBox module in Novell eDirectory 8.7.3.9 and previous versions, and 8.8.x prior to 8.8.2, relies on client-side authentication, which allows remote malicious users to bypass authentication via requests for /SOAP URIs, and cause a denial of service (daem...
Novell Edirectory 8.5.27Novell Edirectory 8.6.2Novell Edirectory 8.7Novell Edirectory 8.8Novell EdirectoryNovell Edirectory 8.7.1Novell Edirectory 8.5Novell Edirectory 8.5.12aNovell Edirectory 8.7.3.8 Presp9Novell Edirectory 8.7.3.9Novell Edirectory 8.7.3Novell Edirectory 8.7.3.8
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook