Lucene search

[email protected]CVE-2009-0895

HistoryDec 03, 2009 - 5:30 p.m.

CVE-2009-0895

2009-12-0317:30:00

CWE-189

[email protected]

web.nvd.nist.gov

cve-2009-0895

novell edirectory

integer overflow

remote code execution

nds verb 0x1

heap-based buffer overflow

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

High

0.592 Medium

EPSS

Percentile

97.8%

JSON

Integer overflow in Novell eDirectory 8.7.3.x before 8.7.3.10 ftf2 and 8.8.x before 8.8.5.2 allows remote attackers to execute arbitrary code via an NDS Verb 0x1 request containing a large integer value that triggers a heap-based buffer overflow.

Affected configurations

NVD

Node

novelledirectoryMatch8.7.3

novelledirectoryMatch8.7.3sp10

novelledirectoryMatch8.7.3sp10ftf1

novelledirectoryMatch8.7.3sp10_b

novelledirectoryMatch8.7.3sp3

novelledirectoryMatch8.7.3sp3ftf1

novelledirectoryMatch8.7.3sp4

novelledirectoryMatch8.7.3sp4ftf1

novelledirectoryMatch8.7.3sp5

novelledirectoryMatch8.7.3sp5ftf1

novelledirectoryMatch8.7.3.8

novelledirectoryMatch8.7.3.9

novelledirectoryMatch8.7.3.10

novelledirectoryMatch8.8

novelledirectoryMatch8.8sp1

novelledirectoryMatch8.8sp2

novelledirectoryMatch8.8sp3ftf3

novelledirectoryMatch8.8sp4

novelledirectoryMatch8.8.1

novelledirectoryMatch8.8.2

novelledirectoryMatch8.8.2ftf1

novelledirectoryMatch8.8.5ftf1

CPENameOperatorVersion
novell:edirectorynovell edirectoryeq8.7.3
novell:edirectorynovell edirectoryeq8.7.3.8
novell:edirectorynovell edirectoryeq8.7.3.9
novell:edirectorynovell edirectoryeq8.7.3.10
novell:edirectorynovell edirectoryeq8.8
novell:edirectorynovell edirectoryeq8.8.1
novell:edirectorynovell edirectoryeq8.8.2
novell:edirectorynovell edirectoryeq8.8.5

CPE	Name	Operator	Version
novell:edirectory	novell edirectory	eq	8.7.3
novell:edirectory	novell edirectory	eq	8.7.3.8
novell:edirectory	novell edirectory	eq	8.7.3.9
novell:edirectory	novell edirectory	eq	8.7.3.10
novell:edirectory	novell edirectory	eq	8.8
novell:edirectory	novell edirectory	eq	8.8.1
novell:edirectory	novell edirectory	eq	8.8.2
novell:edirectory	novell edirectory	eq	8.8.5