CVE-2008-5091
Severity Score
10.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Buffer overflow in the LDAP Service in Novell eDirectory 8.7.3 before SP10a and 8.8 before SP3 allows attackers to cause a denial of service (application crash) via vectors involving an "invalid extensibleMatch filter."
Un desbordamiento de búfer en el Servicio LDAP en eDirectory de Novell versiones 8.7.3 anteriores a SP10a y versiones 8.8 anteriores a SP3, permite a los atacantes causar una denegación de servicio (bloqueo de aplicación) por medio de vectores que implica un "invalid extensibleMatch filter".
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2008-11-14 CVE Reserved
- 2008-11-14 CVE Published
- 2023-05-15 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (8)
| URL | Tag | Source |
|---|---|---|
| http://www.novell.com/support/viewContent.do?externalId=3477912 | X_refsource_confirm | |
| http://www.securityfocus.com/bid/30947 | Vdb Entry | |
| http://www.securitytracker.com/id?1020788 | Vdb Entry | |
| http://www.vupen.com/english/advisories/2008/2462 | Vdb Entry | |
| https://bugzilla.novell.com/show_bug.cgi?id=373853 | X_refsource_misc | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/43590 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.novell.com/documentation/edir873/sp10_readme/netware/readme.txt | 2017-08-08 | |
| http://www.novell.com/support/viewContent.do?externalId=3426981 | 2017-08-08 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | <= 8.8 Search vendor "Novell" for product "Edirectory" and version " <= 8.8" | sp2, windows |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.0 Search vendor "Novell" for product "Edirectory" and version "8.0" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.5 Search vendor "Novell" for product "Edirectory" and version "8.5" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.5.12a Search vendor "Novell" for product "Edirectory" and version "8.5.12a" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.5.27 Search vendor "Novell" for product "Edirectory" and version "8.5.27" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.6.2 Search vendor "Novell" for product "Edirectory" and version "8.6.2" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.7 Search vendor "Novell" for product "Edirectory" and version "8.7" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.7.1 Search vendor "Novell" for product "Edirectory" and version "8.7.1" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.7.1 Search vendor "Novell" for product "Edirectory" and version "8.7.1" | sp1 |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.7.3 Search vendor "Novell" for product "Edirectory" and version "8.7.3" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.7.3 Search vendor "Novell" for product "Edirectory" and version "8.7.3" | sp1, windows |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.7.3 Search vendor "Novell" for product "Edirectory" and version "8.7.3" | sp2, windows |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.7.3 Search vendor "Novell" for product "Edirectory" and version "8.7.3" | sp3, windows |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.7.3 Search vendor "Novell" for product "Edirectory" and version "8.7.3" | sp4, windows |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.7.3 Search vendor "Novell" for product "Edirectory" and version "8.7.3" | sp6, windows |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.7.3 Search vendor "Novell" for product "Edirectory" and version "8.7.3" | sp7, windows |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.7.3 Search vendor "Novell" for product "Edirectory" and version "8.7.3" | sp8, windows |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.7.3 Search vendor "Novell" for product "Edirectory" and version "8.7.3" | sp9, windows |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.7.3.8 Search vendor "Novell" for product "Edirectory" and version "8.7.3.8" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.7.3.8_presp9 Search vendor "Novell" for product "Edirectory" and version "8.7.3.8_presp9" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.7.3.9 Search vendor "Novell" for product "Edirectory" and version "8.7.3.9" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.7.3.9 Search vendor "Novell" for product "Edirectory" and version "8.7.3.9" | linux |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.7.3.9 Search vendor "Novell" for product "Edirectory" and version "8.7.3.9" | solaris |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.7.3.9 Search vendor "Novell" for product "Edirectory" and version "8.7.3.9" | windows_2000 |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.7.3.9 Search vendor "Novell" for product "Edirectory" and version "8.7.3.9" | windows_2003 |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.7.3.10 Search vendor "Novell" for product "Edirectory" and version "8.7.3.10" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.8 Search vendor "Novell" for product "Edirectory" and version "8.8" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.8 Search vendor "Novell" for product "Edirectory" and version "8.8" | linux |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.8 Search vendor "Novell" for product "Edirectory" and version "8.8" | solaris |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.8 Search vendor "Novell" for product "Edirectory" and version "8.8" | windows_2000 |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.8 Search vendor "Novell" for product "Edirectory" and version "8.8" | windows_2003 |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.8.1 Search vendor "Novell" for product "Edirectory" and version "8.8.1" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.8.1 Search vendor "Novell" for product "Edirectory" and version "8.8.1" | linux |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.8.1 Search vendor "Novell" for product "Edirectory" and version "8.8.1" | solaris |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.8.1 Search vendor "Novell" for product "Edirectory" and version "8.8.1" | windows_2000 |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.8.1 Search vendor "Novell" for product "Edirectory" and version "8.8.1" | windows_2003 |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.8.2 Search vendor "Novell" for product "Edirectory" and version "8.8.2" | - |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.8.2 Search vendor "Novell" for product "Edirectory" and version "8.8.2" | linux |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.8.2 Search vendor "Novell" for product "Edirectory" and version "8.8.2" | solaris |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.8.2 Search vendor "Novell" for product "Edirectory" and version "8.8.2" | windows_2000 |
Affected
| ||||||
| Novell Search vendor "Novell" | Edirectory Search vendor "Novell" for product "Edirectory" | 8.8.2 Search vendor "Novell" for product "Edirectory" and version "8.8.2" | windows_2003 |
Affected
| ||||||