PT-2008-6238 · Novell · Novell Edirectory

Publicado 2008-11-14 · Atualizado 2017-08-08 · CVE-2008-5091

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Novell eDirectory versions 8.7.3 before SP10a Novell eDirectory versions 8.8 before SP3

Description The issue is related to a buffer overflow in the LDAP Service, which can be triggered by an invalid extensibleMatch filter, leading to a denial of service where the application crashes.

Recommendations For Novell eDirectory version 8.7.3, update to SP10a or later to resolve the issue. For Novell eDirectory version 8.8, update to SP3 or later to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2008-5091

Produtos afetados

Novell Edirectory

Referências · 9

• http://novell.com/documentation/edir873/sp10_readme/netware/readme.txt · Aviso do Fabricante
• http://novell.com/support/viewContent.do?externalId=3426981 · Aviso do Fabricante
• http://novell.com/support/viewContent.do?externalId=3477912 · Nota
• http://vupen.com/english/advisories/2008/2462 · Nota
• http://securitytracker.com/id?1020788 · Nota
• https://bugzilla.novell.com/show_bug.cgi?id=373853 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-5091 · Nota de Segurança
• http://securityfocus.com/bid/30947 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43590 · Nota