Published: 14/07/2009 Updated: 11/10/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Off-by-one error in the iMonitor component in Novell eDirectory 8.8 SP3, 8.8 SP3 FTF3, and possibly other versions allows remote malicious users to execute arbitrary code via an HTTP request with a crafted Accept-Language header, which triggers a stack-based buffer overflow.

Vulnerable Product	Search on Vulmon	Subscribe to Product
novell edirectory 8.8

#!usr/bin/perl -w ####################################################################################### # Novell eDirectory iMonitor 'Accept-Language' Request Buffer Overflow Vulnerability # Refer: # wwwsecurityfocuscom/bid/33928/discuss # # To run this exploit on MS Windows replace "#!usr/bin/perl -w" with # "#!Instal ...

CWE-189 http://secunia.com/secunia_research/2009-13/http://www.novell.com/support/viewContent.do?externalId=3426981 http://secunia.com/advisories/34160 http://www.securityfocus.com/bid/35666 http://www.vupen.com/english/advisories/2009/1883 http://osvdb.org/55847 https://exchange.xforce.ibmcloud.com/vulnerabilities/51703 http://www.securityfocus.com/archive/1/504924/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/8129/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2009-0192

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect