edirectory Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/edirectory/ Sun, 26 Feb 2023 09:10:33 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png edirectory Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/edirectory/ 32 32 CVE-2008-4478 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-4478/ Sun, 26 Feb 2023 09:10:33 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-4478/ Multiple integer overflows in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.73 before 8.7.3.10 ftf1, allow remote attackers to execute arbitrary code via a crafted (1) Content-Length header in a SOAP request or (2) Netware Core Protocol opcode 0x0F message, which triggers a heap-based buffer overflow.

The post CVE-2008-4478 appeared first on CVE Vulnerability.

]]> Multiple integer overflows in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.73 before 8.7.3.10 ftf1, allow remote attackers to execute arbitrary code via a crafted (1) Content-Length header in a SOAP request or (2) Netware Core Protocol opcode 0x0F message, which triggers a heap-based buffer overflow.

The post CVE-2008-4478 appeared first on CVE Vulnerability.

]]> CVE-2008-4479 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-4479/ Sun, 26 Feb 2023 09:10:33 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-4479/ Heap-based buffer overflow in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.7.3 before 8.7.3.10 ftf1, allows remote attackers to execute arbitrary code via a SOAP request with a long Accept-Language header.

The post CVE-2008-4479 appeared first on CVE Vulnerability.

]]> Heap-based buffer overflow in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.7.3 before 8.7.3.10 ftf1, allows remote attackers to execute arbitrary code via a SOAP request with a long Accept-Language header.

The post CVE-2008-4479 appeared first on CVE Vulnerability.

]]> CVE-2008-4480 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-4480/ Sun, 26 Feb 2023 09:10:33 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-4480/ Heap-based buffer overflow in dhost.exe in Novell eDirectory 8.x before 8.8.3, and 8.7.3 before 8.7.3.10 ftf1, allows remote attackers to execute arbitrary code via a crafted Netware Core Protocol opcode 0x24 message that triggers a calculation error that under-allocates a heap buffer.

The post CVE-2008-4480 appeared first on CVE Vulnerability.

]]> Heap-based buffer overflow in dhost.exe in Novell eDirectory 8.x before 8.8.3, and 8.7.3 before 8.7.3.10 ftf1, allows remote attackers to execute arbitrary code via a crafted Netware Core Protocol opcode 0x24 message that triggers a calculation error that under-allocates a heap buffer.

The post CVE-2008-4480 appeared first on CVE Vulnerability.

]]> CVE-2008-0924 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-0924/ Sun, 26 Feb 2023 09:08:46 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-0924/ Stack-based buffer overflow in the DoLBURPRequest function in libnldap in ndsd in Novell eDirectory 8.7.3.9 and earlier, and 8.8.1 and earlier in the 8.8.x series, allows remote attackers to cause a denial of service (daemon crash or CPU consumption) or execute arbitrary code via a long delRequest LDAP Extended Request message, probably involving a long […]

The post CVE-2008-0924 appeared first on CVE Vulnerability.

]]> Stack-based buffer overflow in the DoLBURPRequest function in libnldap in ndsd in Novell eDirectory 8.7.3.9 and earlier, and 8.8.1 and earlier in the 8.8.x series, allows remote attackers to cause a denial of service (daemon crash or CPU consumption) or execute arbitrary code via a long delRequest LDAP Extended Request message, probably involving a long Distinguished Name (DN) field.

The post CVE-2008-0924 appeared first on CVE Vulnerability.

]]> CVE-2008-0926 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-0926/ Sun, 26 Feb 2023 09:08:46 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-0926/ The SOAP interface to the eMBox module in Novell eDirectory 8.7.3.9 and earlier, and 8.8.x before 8.8.2, relies on client-side authentication, which allows remote attackers to bypass authentication via requests for /SOAP URIs, and cause a denial of service (daemon shutdown) or read arbitrary files. NOTE: it was later reported that 8.7.3.10 (aka 8.7.3 SP10) […]

The post CVE-2008-0926 appeared first on CVE Vulnerability.

]]> The SOAP interface to the eMBox module in Novell eDirectory 8.7.3.9 and earlier, and 8.8.x before 8.8.2, relies on client-side authentication, which allows remote attackers to bypass authentication via requests for /SOAP URIs, and cause a denial of service (daemon shutdown) or read arbitrary files. NOTE: it was later reported that 8.7.3.10 (aka 8.7.3 SP10) is also affected.

The post CVE-2008-0926 appeared first on CVE Vulnerability.

]]> CVE-2008-0927 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-0927/ Sun, 26 Feb 2023 09:08:46 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-0927/ dhost.exe in Novell eDirectory 8.7.3 before sp10 and 8.8.2 allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with (1) multiple Connection headers or (2) a Connection header with multiple comma-separated values. NOTE: this might be similar to CVE-2008-1777.

The post CVE-2008-0927 appeared first on CVE Vulnerability.

]]> dhost.exe in Novell eDirectory 8.7.3 before sp10 and 8.8.2 allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with (1) multiple Connection headers or (2) a Connection header with multiple comma-separated values. NOTE: this might be similar to CVE-2008-1777.

The post CVE-2008-0927 appeared first on CVE Vulnerability.

]]>