PT-2008-3315 · Novell · Edirectory

Publicado 2008-04-14 · Atualizado 2011-03-08 · CVE-2008-1777

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Novell eDirectory version 8.8.2

Description The issue allows remote attackers to cause a denial of service, specifically CPU consumption, by sending a long HTTP HEAD request to TCP port 8028. This affects the eDirectory Host Environment service, which is run by the dhost.exe process.

Recommendations For Novell eDirectory version 8.8.2, consider restricting access to TCP port 8028 to minimize the risk of exploitation. As a temporary workaround, limiting the length of HTTP HEAD requests to the eDirectory Host Environment service may help mitigate the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2008-1777

Produtos afetados

Edirectory

Referências · 6

• 🔥 http://offensive-security.com/0day/novel-edir.py.txt · Exploit
• 🔥 http://securityfocus.com/bid/28572 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-1777 · Nota de Segurança
• http://secunia.com/advisories/29639 · Aviso do Fabricante
• http://vupen.com/english/advisories/2008/1075 · Nota
• http://securitytracker.com/id?1019783 · Nota