PT-2008-5712 · Novell · Novell Edirectory

Publicado 2008-10-14 · Atualizado 2018-11-02 · CVE-2008-4479

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Novell eDirectory versions 8.7.3 before 8.7.3.10 ftf1 Novell eDirectory versions 8.8 before 8.8.3

Description: A heap-based buffer overflow issue exists, allowing remote attackers to execute arbitrary code via a SOAP request with a long Accept-Language header.

Recommendations: For Novell eDirectory version 8.7.3, update to version 8.7.3.10 ftf1 or later. For Novell eDirectory version 8.8, update to version 8.8.3 or later.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2008-4479

Produtos afetados

Novell Edirectory

Referências · 10

• http://securityreason.com/securityalert/4405 · Nota
• http://zerodayinitiative.com/advisories/ZDI-08-064 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-4479 · Nota de Segurança
• http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037180.html · Aviso do Fabricante
• http://vupen.com/english/advisories/2008/2738 · Nota
• http://securityfocus.com/archive/1/497164/100/0/threaded · Nota
• http://secunia.com/advisories/32111 · Nota
• http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037181.html · Aviso do Fabricante
• http://novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7000086&sliceId=1&docTypeID=DT_TID_1_1&dialogID=78066829&stateId=0%200%2078062953 · Aviso do Fabricante
• http://securitytracker.com/id?1020989 · Nota