PT-2008-5712 · Novell · Novell Edirectory

Published 2008-10-14 · Updated 2018-11-02 · CVE-2008-4479

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Novell eDirectory versions 8.7.3 before 8.7.3.10 ftf1 Novell eDirectory versions 8.8 before 8.8.3

Description: A heap-based buffer overflow issue exists, allowing remote attackers to execute arbitrary code via a SOAP request with a long Accept-Language header.

Recommendations: For Novell eDirectory version 8.7.3, update to version 8.7.3.10 ftf1 or later. For Novell eDirectory version 8.8, update to version 8.8.3 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-4479

Affected Products

Novell Edirectory

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2008-4479 · Security Note
• http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037180.html · Vendor Advisory
• http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037181.html · Vendor Advisory
• http://novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7000086&sliceId=1&docTypeID=DT_TID_1_1&dialogID=78066829&stateId=0%200%2078062953 · Vendor Advisory
• http://securityreason.com/securityalert/4405 · Note
• http://zerodayinitiative.com/advisories/ZDI-08-064 · Note
• http://vupen.com/english/advisories/2008/2738 · Note
• http://securityfocus.com/archive/1/497164/100/0/threaded · Note
• http://secunia.com/advisories/32111 · Note
• http://securitytracker.com/id?1020989 · Note