PT-2008-5711 · Novell · Novell Edirectory

Sebastian Apelt · Published 2008-10-14 · Updated 2018-10-11 · CVE-2008-4478

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Novell eDirectory versions 8.8 before 8.8.3 Novell eDirectory versions 8.7.3 before 8.7.3.10 ftf1

Description: The issue is caused by multiple integer overflows in dhost.exe, allowing remote attackers to execute arbitrary code. This can be achieved via a crafted Content-Length header in a SOAP request or a Netware Core Protocol opcode 0x0F message, which triggers a heap-based buffer overflow.

Recommendations: For Novell eDirectory versions 8.8 before 8.8.3, update to version 8.8.3 or later. For Novell eDirectory versions 8.7.3 before 8.7.3.10 ftf1, update to version 8.7.3.10 ftf1 or later.

Fix

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2008-4478

Affected Products

Novell Edirectory

References · 15

• http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037181.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2008-4478 · Security Note
• http://novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7001184&sliceId=1&docTypeID=DT_TID_1_1&dialogID=78066829&stateId=0%200%2078062953 · Vendor Advisory
• http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037180.html · Patch
• http://novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7000087&sliceId=1&docTypeID=DT_TID_1_1&dialogID=78066829&stateId=0%200%2078062953 · Vendor Advisory
• http://zerodayinitiative.com/advisories/ZDI-08-063 · Note
• http://securityfocus.com/archive/1/497165/100/0/threaded · Note
• http://zerodayinitiative.com/advisories/ZDI-08-065 · Note
• http://securitytracker.com/id?1020990 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45628 · Note
• http://securityfocus.com/archive/1/497163/100/0/threaded · Note
• http://securityreason.com/securityalert/4406 · Note
• http://vupen.com/english/advisories/2008/2738 · Note
• http://secunia.com/advisories/32111 · Note
• http://securitytracker.com/id?1020989 · Note