CVE-2008-5092

Heap-based buffer overflows in Novell eDirectory HTTP protocol stack (HTTPSTK) before 8.8 SP3 have unknown impact and attack vectors related to the (1) HTTP language header and (2) HTTP content-length header.

Link	Resource
http://www.securitytracker.com/id?1020786
http://www.novell.com/support/viewContent.do?externalId=3426981	Vendor Advisory
http://www.vupen.com/english/advisories/2008/2462
http://www.securityfocus.com/bid/30947

Configuration 1

cpe:2.3:a:novell:edirectory:8.7.3.9:*:*:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.6.2:*:*:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.5.27:*:*:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.7.3:sp5:windows:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.7:*:*:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.8:*:windows_2003:*:*:*:*:* cpe:2.3:a:novell:edirectory:85.20:*:*:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.8.1:*:solaris:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.8:*:*:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.0:*:*:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.7.3.9:*:solaris:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.7.3:*:*:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.7.3:sp4:windows:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.8:*:windows_2000:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.8:*:solaris:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.7.3:sp1:windows:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.5.12a:*:*:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.8.1:*:windows_2000:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.7.3:sp8:windows:*:*:*:*:* cpe:2.3:a:novell:edirectory:*:sp2:windows:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.8.1:*:windows_2003:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.7.3.10:*:*:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.8.2:*:*:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.7.3.9:*:windows_2003:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.5:*:*:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.8.2:*:windows_2000:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.8.2:*:linux:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.7.3:sp3:windows:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.8.2:*:windows_2003:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.7.3:sp6:windows:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.7.3.9:*:windows_2000:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.7.3.8_presp9:*:*:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.8.2:*:solaris:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.7.1:*:*:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.7.1:sp1:*:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.7.3:sp7:windows:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.7.3.8:*:*:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.8.1:*:*:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.8:*:linux:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.8.1:*:linux:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.7.3:sp2:windows:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.7.3:sp9:windows:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.7.3.9:*:linux:*:*:*:*:*

---

Published : 2008-11-14 07:20

Updated : 2012-10-31 03:06

---

NVD link : CVE-2008-5092

Mitre link : CVE-2008-5092

No products.

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer