CVE-2008-5091

EPSS 2.12%
Veröffentlicht 14.11.2008 19:20:54
Zuletzt bearbeitet 16.06.2026 22:59:14
Erkennungen
Login

Buffer overflow in the LDAP Service in Novell eDirectory 8.7.3 before SP10a and 8.8 before SP3 allows attackers to cause a denial of service (application crash) via vectors involving an "invalid extensibleMatch filter."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 11

NVD 41 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Novell ≫ Edirectory Update sp2 Edition windows Version <= 8.8

Novell ≫ Edirectory Version 8.0

Novell ≫ Edirectory Version 8.5

Novell ≫ Edirectory Version 8.5.12a

Novell ≫ Edirectory Version 8.5.27

Novell ≫ Edirectory Version 8.6.2

Novell ≫ Edirectory Version 8.7

Novell ≫ Edirectory Version 8.7.1

Novell ≫ Edirectory Version 8.7.1 Update sp1

Novell ≫ Edirectory Version 8.7.3

Novell ≫ Edirectory Version 8.7.3 Update sp1 Edition windows

Novell ≫ Edirectory Version 8.7.3 Update sp2 Edition windows

Novell ≫ Edirectory Version 8.7.3 Update sp3 Edition windows

Novell ≫ Edirectory Version 8.7.3 Update sp4 Edition windows

Novell ≫ Edirectory Version 8.7.3 Update sp6 Edition windows

Novell ≫ Edirectory Version 8.7.3 Update sp7 Edition windows

Novell ≫ Edirectory Version 8.7.3 Update sp8 Edition windows

Novell ≫ Edirectory Version 8.7.3 Update sp9 Edition windows

Novell ≫ Edirectory Version 8.7.3.8

Novell ≫ Edirectory Version 8.7.3.8_presp9

Novell ≫ Edirectory Version 8.7.3.9

Novell ≫ Edirectory Version 8.7.3.9 Edition linux

Novell ≫ Edirectory Version 8.7.3.9 Edition solaris

Novell ≫ Edirectory Version 8.7.3.9 Edition windows_2000

Novell ≫ Edirectory Version 8.7.3.9 Edition windows_2003

Novell ≫ Edirectory Version 8.7.3.10

Novell ≫ Edirectory Version 8.8

Novell ≫ Edirectory Version 8.8 Edition linux

Novell ≫ Edirectory Version 8.8 Edition solaris

Novell ≫ Edirectory Version 8.8 Edition windows_2000

Novell ≫ Edirectory Version 8.8 Edition windows_2003

Novell ≫ Edirectory Version 8.8.1

Novell ≫ Edirectory Version 8.8.1 Edition linux

Novell ≫ Edirectory Version 8.8.1 Edition solaris

Novell ≫ Edirectory Version 8.8.1 Edition windows_2000

Novell ≫ Edirectory Version 8.8.1 Edition windows_2003

Novell ≫ Edirectory Version 8.8.2

Novell ≫ Edirectory Version 8.8.2 Edition linux

Novell ≫ Edirectory Version 8.8.2 Edition solaris

Novell ≫ Edirectory Version 8.8.2 Edition windows_2000

Novell ≫ Edirectory Version 8.8.2 Edition windows_2003

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.12%	0.795

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://www.novell.com/support/viewContent.do?externalId=3426981

Vendor Advisory

http://www.novell.com/support/viewContent.do?externalId=3477912

http://www.novell.com/documentation/edir873/sp10_readme/netware/readme.txt

Vendor Advisory

http://www.securityfocus.com/bid/30947

http://www.securitytracker.com/id?1020788

http://www.vupen.com/english/advisories/2008/2462

https://bugzilla.novell.com/show_bug.cgi?id=373853

https://exchange.xforce.ibmcloud.com/vulnerabilities/43590

https://nvd.nist.gov/vuln/detail/CVE-2008-5091

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-5091

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-5091

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2008-5091