CVE-2009-0895

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2009-0895
Integer overflow in Novell eDirectory 8.7.3.x before 8.7.3.10 ftf2 and 8.8.x before 8.8.5.2 allows remote attackers to execute arbitrary code via an NDS Verb 0x1 request containing a large integer value that triggers a heap-based buffer overflow.

10.0 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://secunia.com/advisories/37554 Vendor Advisory
http://www.iss.net/threats/356.html
http://www.novell.com/support/viewContent.do?externalId=7004912 Patch Vendor Advisory
http://www.securityfocus.com/bid/37184
http://www.vupen.com/english/advisories/2009/3379 Patch Vendor Advisory
https://bugzilla.novell.com/show_bug.cgi?id=524344
https://bugzilla.novell.com/show_bug.cgi?id=545887
https://exchange.xforce.ibmcloud.com/vulnerabilities/50616
http://secunia.com/advisories/37554 Vendor Advisory
http://www.iss.net/threats/356.html
http://www.novell.com/support/viewContent.do?externalId=7004912 Patch Vendor Advisory
http://www.securityfocus.com/bid/37184
http://www.vupen.com/english/advisories/2009/3379 Patch Vendor Advisory
https://bugzilla.novell.com/show_bug.cgi?id=524344
https://bugzilla.novell.com/show_bug.cgi?id=545887
https://exchange.xforce.ibmcloud.com/vulnerabilities/50616
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:novell:edirectory:8.7.3:*:*:*:*:*:*:*
cpe:2.3:a:novell:edirectory:8.7.3:sp10:*:*:*:*:*:*
cpe:2.3:a:novell:edirectory:8.7.3:sp10:ftf1:*:*:*:*:*
cpe:2.3:a:novell:edirectory:8.7.3:sp10_b:*:*:*:*:*:*
cpe:2.3:a:novell:edirectory:8.7.3:sp3:*:*:*:*:*:*
cpe:2.3:a:novell:edirectory:8.7.3:sp3:ftf1:*:*:*:*:*
cpe:2.3:a:novell:edirectory:8.7.3:sp4:*:*:*:*:*:*
cpe:2.3:a:novell:edirectory:8.7.3:sp4:ftf1:*:*:*:*:*
cpe:2.3:a:novell:edirectory:8.7.3:sp5:*:*:*:*:*:*
cpe:2.3:a:novell:edirectory:8.7.3:sp5:ftf1:*:*:*:*:*
cpe:2.3:a:novell:edirectory:8.7.3.8:*:*:*:*:*:*:*
cpe:2.3:a:novell:edirectory:8.7.3.9:*:*:*:*:*:*:*
cpe:2.3:a:novell:edirectory:8.7.3.10:*:*:*:*:*:*:*
cpe:2.3:a:novell:edirectory:8.8:*:*:*:*:*:*:*
cpe:2.3:a:novell:edirectory:8.8:sp1:*:*:*:*:*:*
cpe:2.3:a:novell:edirectory:8.8:sp2:*:*:*:*:*:*
cpe:2.3:a:novell:edirectory:8.8:sp3:ftf3:*:*:*:*:*
cpe:2.3:a:novell:edirectory:8.8:sp4:*:*:*:*:*:*
cpe:2.3:a:novell:edirectory:8.8.1:*:*:*:*:*:*:*
cpe:2.3:a:novell:edirectory:8.8.2:*:*:*:*:*:*:*
cpe:2.3:a:novell:edirectory:8.8.2:*:ftf1:*:*:*:*:*
cpe:2.3:a:novell:edirectory:8.8.5:*:ftf1:*:*:*:*:*
History

21 Nov 2024, 01:01

Type Values Removed Values Added
References () http://secunia.com/advisories/37554 - Vendor Advisory () http://secunia.com/advisories/37554 - Vendor Advisory
References () http://www.iss.net/threats/356.html - () http://www.iss.net/threats/356.html -
References () http://www.novell.com/support/viewContent.do?externalId=7004912 - Patch, Vendor Advisory () http://www.novell.com/support/viewContent.do?externalId=7004912 - Patch, Vendor Advisory
References () http://www.securityfocus.com/bid/37184 - () http://www.securityfocus.com/bid/37184 -
References () http://www.vupen.com/english/advisories/2009/3379 - Patch, Vendor Advisory () http://www.vupen.com/english/advisories/2009/3379 - Patch, Vendor Advisory
References () https://bugzilla.novell.com/show_bug.cgi?id=524344 - () https://bugzilla.novell.com/show_bug.cgi?id=524344 -
References () https://bugzilla.novell.com/show_bug.cgi?id=545887 - () https://bugzilla.novell.com/show_bug.cgi?id=545887 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/50616 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/50616 -
Information

Published : 2009-12-03 17:30

Updated : 2024-11-21 01:01

NVD link : CVE-2009-0895

Mitre link : CVE-2009-0895

CVE.ORG link : CVE-2009-0895

JSON object : View

Products Affected

novell

  • edirectory
CWE
CWE-189

Numeric Errors