Lucene search
RootSSV:3169HistoryApr 15, 2008 - 12:00 a.m.
Novell eDirectory HTTP Connection头拒绝服务漏洞
2008-04-1500:00:00
Root
www.seebug.org
14
0.968 High
EPSS
Percentile
99.6%
BUGTRAQ ID: 28757
CVE(CAN) ID: CVE-2008-0927
Novell eDirectory是一个的跨平台的目录服务器。
Novell eDirectory的dhost.exe服务在处理HTTP请求中的Connection头时存在漏洞，如果远程攻击者向该服务发送了多个特制的HTTP请求的话，就可能导致耗尽大量CPU资源。
Novell eDirectory <= 8.8.1
Novell eDirectory <= 8.7.3.9
Novell
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
<a href=“http://download.novell.com/” target=“_blank”>http://download.novell.com/</a>
Related
packetstorm
packetstorm
novelledir-dos.txt
2008-05-06 00:00:00
seebug
seebug
Novell eDirectory < 8.7.3 SP 10 / 8.8.2 HTTP headers DOS Vulnerability
2008-05-10 00:00:00
Novell eDirectory < 8.7.3 SP 10 / 8.8.2 - HTTP headers DoS Vulnerability
2014-07-01 00:00:00
exploitpack
exploitpack
Novell eDirectory 8.7.3 SP 10 8.8.2 - HTTP headers Denial of Service
2008-05-05 00:00:00
checkpoint_advisories
checkpoint_advisories
Novell eDirectory HTTP Headers Denial of Service (CVE-2008-0927)
2008-05-20 00:00:00
securityvulns
securityvulns
Novell eDirectory DoS via HTTP headers
2008-05-06 00:00:00
nessus
nessus
exploitdb
exploitdb
Novell eDirectory < 8.7.3 SP 10 / 8.8.2 - HTTP headers Denial of Service
2008-05-05 00:00:00
prion
prion
Code injection
2008-04-14 16:05:00
cvelist
cvelist
CVE-2008-0927
2008-04-14 16:00:00
cve
cve
CVE-2008-0927
2008-04-14 16:05:00