CVE-2008-4480

Heap-based buffer overflow in dhost.exe in Novell eDirectory 8.x before 8.8.3, and 8.7.3 before 8.7.3.10 ftf1, allows remote attackers to execute arbitrary code via a crafted Netware Core Protocol opcode 0x24 message that triggers a calculation error that under-allocates a heap buffer.
References
Link Resource
http://secunia.com/advisories/32111 Third Party Advisory
http://securityreason.com/securityalert/4404 Third Party Advisory
http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037180.html Patch Vendor Advisory
http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037181.html Patch Vendor Advisory
http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7001183&sliceId=1&docTypeID=DT_TID_1_1&dialogID=78066829&stateId=0%200%2078062953 Vendor Advisory
http://www.novell.com/support/viewContent.do?externalId=3426981 Vendor Advisory
http://www.novell.com/support/viewContent.do?externalId=3477912 Vendor Advisory
http://www.securityfocus.com/archive/1/497169/100/0/threaded Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1020990 Third Party Advisory VDB Entry
http://www.vupen.com/english/advisories/2008/2738 Third Party Advisory
http://www.zerodayinitiative.com/advisories/ZDI-08-066/ Third Party Advisory VDB Entry
http://secunia.com/advisories/32111 Third Party Advisory
http://securityreason.com/securityalert/4404 Third Party Advisory
http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037180.html Patch Vendor Advisory
http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037181.html Patch Vendor Advisory
http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7001183&sliceId=1&docTypeID=DT_TID_1_1&dialogID=78066829&stateId=0%200%2078062953 Vendor Advisory
http://www.novell.com/support/viewContent.do?externalId=3426981 Vendor Advisory
http://www.novell.com/support/viewContent.do?externalId=3477912 Vendor Advisory
http://www.securityfocus.com/archive/1/497169/100/0/threaded Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1020990 Third Party Advisory VDB Entry
http://www.vupen.com/english/advisories/2008/2738 Third Party Advisory
http://www.zerodayinitiative.com/advisories/ZDI-08-066/ Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:novell:edirectory:*:*:*:*:*:*:*:*
cpe:2.3:a:novell:edirectory:*:*:*:*:*:*:*:*

History

21 Nov 2024, 00:51

Type Values Removed Values Added
References () http://secunia.com/advisories/32111 - Third Party Advisory () http://secunia.com/advisories/32111 - Third Party Advisory
References () http://securityreason.com/securityalert/4404 - Third Party Advisory () http://securityreason.com/securityalert/4404 - Third Party Advisory
References () http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037180.html - Patch, Vendor Advisory () http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037180.html - Patch, Vendor Advisory
References () http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037181.html - Patch, Vendor Advisory () http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037181.html - Patch, Vendor Advisory
References () http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7001183&sliceId=1&docTypeID=DT_TID_1_1&dialogID=78066829&stateId=0%200%2078062953 - Vendor Advisory () http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7001183&sliceId=1&docTypeID=DT_TID_1_1&dialogID=78066829&stateId=0%200%2078062953 - Vendor Advisory
References () http://www.novell.com/support/viewContent.do?externalId=3426981 - Vendor Advisory () http://www.novell.com/support/viewContent.do?externalId=3426981 - Vendor Advisory
References () http://www.novell.com/support/viewContent.do?externalId=3477912 - Vendor Advisory () http://www.novell.com/support/viewContent.do?externalId=3477912 - Vendor Advisory
References () http://www.securityfocus.com/archive/1/497169/100/0/threaded - Third Party Advisory, VDB Entry () http://www.securityfocus.com/archive/1/497169/100/0/threaded - Third Party Advisory, VDB Entry
References () http://www.securitytracker.com/id?1020990 - Third Party Advisory, VDB Entry () http://www.securitytracker.com/id?1020990 - Third Party Advisory, VDB Entry
References () http://www.vupen.com/english/advisories/2008/2738 - Third Party Advisory () http://www.vupen.com/english/advisories/2008/2738 - Third Party Advisory
References () http://www.zerodayinitiative.com/advisories/ZDI-08-066/ - Third Party Advisory, VDB Entry () http://www.zerodayinitiative.com/advisories/ZDI-08-066/ - Third Party Advisory, VDB Entry

Information

Published : 2008-10-14 22:36

Updated : 2024-11-21 00:51


NVD link : CVE-2008-4480

Mitre link : CVE-2008-4480

CVE.ORG link : CVE-2008-4480


JSON object : View

Products Affected

novell

  • edirectory
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer