Heap-based buffer overflow in dhost.exe in Novell eDirectory 8.x before 8.8.3, and 8.7.3 before 8.7.3.10 ftf1, allows remote attackers to execute arbitrary code via a crafted Netware Core Protocol opcode 0x24 message that triggers a calculation error that under-allocates a heap buffer.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 00:51
Type | Values Removed | Values Added |
---|---|---|
References | () http://secunia.com/advisories/32111 - Third Party Advisory | |
References | () http://securityreason.com/securityalert/4404 - Third Party Advisory | |
References | () http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037180.html - Patch, Vendor Advisory | |
References | () http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037181.html - Patch, Vendor Advisory | |
References | () http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7001183&sliceId=1&docTypeID=DT_TID_1_1&dialogID=78066829&stateId=0%200%2078062953 - Vendor Advisory | |
References | () http://www.novell.com/support/viewContent.do?externalId=3426981 - Vendor Advisory | |
References | () http://www.novell.com/support/viewContent.do?externalId=3477912 - Vendor Advisory | |
References | () http://www.securityfocus.com/archive/1/497169/100/0/threaded - Third Party Advisory, VDB Entry | |
References | () http://www.securitytracker.com/id?1020990 - Third Party Advisory, VDB Entry | |
References | () http://www.vupen.com/english/advisories/2008/2738 - Third Party Advisory | |
References | () http://www.zerodayinitiative.com/advisories/ZDI-08-066/ - Third Party Advisory, VDB Entry |
Information
Published : 2008-10-14 22:36
Updated : 2024-11-21 00:51
NVD link : CVE-2008-4480
Mitre link : CVE-2008-4480
CVE.ORG link : CVE-2008-4480
JSON object : View
Products Affected
novell
- edirectory
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer