CVE-2012-0432
Novell NCP - Remote Command Execution
Severity Score
10.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
2
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Stack-based buffer overflow in the Novell NCP implementation in NetIQ eDirectory 8.8.7.x before 8.8.7.2 allows remote attackers to have an unspecified impact via unknown vectors.
Un desbordamiento de búfer basado en pila en la implementación de Novell NCP en NetIQ eDirectory v8.8.7.x ante v8.8.7.2 permite a atacantes remotos tener un impacto no especificado a través de vectores desconocidos.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2012-01-09 CVE Reserved
- 2012-12-25 CVE Published
- 2013-01-18 First Exploit
- 2024-09-16 CVE Updated
- 2024-11-20 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| http://www.novell.com/support/kb/doc.php?id=3426981 | X_refsource_confirm | |
| https://bugzilla.novell.com/show_bug.cgi?id=785272 | X_refsource_confirm |
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/24205 | 2013-01-18 | |
| https://www.exploit-db.com/exploits/24323 | 2013-01-24 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Microfocus Search vendor "Microfocus" | Edirectory Search vendor "Microfocus" for product "Edirectory" | 8.8.7.0 Search vendor "Microfocus" for product "Edirectory" and version "8.8.7.0" | - |
Affected
| ||||||
| Microfocus Search vendor "Microfocus" | Edirectory Search vendor "Microfocus" for product "Edirectory" | 8.8.7.1 Search vendor "Microfocus" for product "Edirectory" and version "8.8.7.1" | - |
Affected
| ||||||