CVE-2008-5092

EPSS 1.74%
Veröffentlicht 14.11.2008 19:20:54
Zuletzt bearbeitet 16.06.2026 22:59:14
Erkennungen
Login

Heap-based buffer overflows in Novell eDirectory HTTP protocol stack (HTTPSTK) before 8.8 SP3 have unknown impact and attack vectors related to the (1) HTTP language header and (2) HTTP content-length header.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 7

NVD 43 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Novell ≫ Edirectory Update sp2 Edition windows Version <= 8.8

Novell ≫ Edirectory Version 8.0

Novell ≫ Edirectory Version 8.5

Novell ≫ Edirectory Version 8.5.12a

Novell ≫ Edirectory Version 8.5.27

Novell ≫ Edirectory Version 8.6.2

Novell ≫ Edirectory Version 8.7

Novell ≫ Edirectory Version 8.7.1

Novell ≫ Edirectory Version 8.7.1 Update sp1

Novell ≫ Edirectory Version 8.7.3

Novell ≫ Edirectory Version 8.7.3 Update sp1 Edition windows

Novell ≫ Edirectory Version 8.7.3 Update sp2 Edition windows

Novell ≫ Edirectory Version 8.7.3 Update sp3 Edition windows

Novell ≫ Edirectory Version 8.7.3 Update sp4 Edition windows

Novell ≫ Edirectory Version 8.7.3 Update sp5 Edition windows

Novell ≫ Edirectory Version 8.7.3 Update sp6 Edition windows

Novell ≫ Edirectory Version 8.7.3 Update sp7 Edition windows

Novell ≫ Edirectory Version 8.7.3 Update sp8 Edition windows

Novell ≫ Edirectory Version 8.7.3 Update sp9 Edition windows

Novell ≫ Edirectory Version 8.7.3.8

Novell ≫ Edirectory Version 8.7.3.8_presp9

Novell ≫ Edirectory Version 8.7.3.9

Novell ≫ Edirectory Version 8.7.3.9 Edition linux

Novell ≫ Edirectory Version 8.7.3.9 Edition solaris

Novell ≫ Edirectory Version 8.7.3.9 Edition windows_2000

Novell ≫ Edirectory Version 8.7.3.9 Edition windows_2003

Novell ≫ Edirectory Version 8.7.3.10

Novell ≫ Edirectory Version 8.8

Novell ≫ Edirectory Version 8.8 Edition linux

Novell ≫ Edirectory Version 8.8 Edition solaris

Novell ≫ Edirectory Version 8.8 Edition windows_2000

Novell ≫ Edirectory Version 8.8 Edition windows_2003

Novell ≫ Edirectory Version 8.8.1

Novell ≫ Edirectory Version 8.8.1 Edition linux

Novell ≫ Edirectory Version 8.8.1 Edition solaris

Novell ≫ Edirectory Version 8.8.1 Edition windows_2000

Novell ≫ Edirectory Version 8.8.1 Edition windows_2003

Novell ≫ Edirectory Version 8.8.2

Novell ≫ Edirectory Version 8.8.2 Edition linux

Novell ≫ Edirectory Version 8.8.2 Edition solaris

Novell ≫ Edirectory Version 8.8.2 Edition windows_2000

Novell ≫ Edirectory Version 8.8.2 Edition windows_2003

Novell ≫ Edirectory Version 85.20

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.74%	0.748

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://www.novell.com/support/viewContent.do?externalId=3426981

Vendor Advisory

http://www.securityfocus.com/bid/30947

http://www.vupen.com/english/advisories/2008/2462

http://www.securitytracker.com/id?1020786

https://nvd.nist.gov/vuln/detail/CVE-2008-5092

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-5092

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-5092

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2008-5092