CVE-2008-1809

Heap-based buffer overflow in Novell eDirectory 8.7.3 before 8.7.3.10b, and 8.8 before 8.8.2 FTF2, allows remote attackers to execute arbitrary code via an LDAP search request containing "NULL search parameters."

Link	Resource
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=724
http://www.novell.com/support/viewContent.do?externalId=3843876	Patch
http://www.securityfocus.com/bid/30175
http://www.securitytracker.com/id?1020470
http://secunia.com/advisories/31036
http://www.vupen.com/english/advisories/2008/2062/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/43716

Configuration 1

cpe:2.3:a:novell:edirectory:8.8:*:*:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.7.3:*:*:*:*:*:*:*

---

Published : 2008-07-14 06:41

Updated : 2017-08-08 01:30

---

NVD link : CVE-2008-1809

Mitre link : CVE-2008-1809

No products.

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer