PT-2008-6238 · Novell · Novell Edirectory

Published 2008-11-14 · Updated 2017-08-08 · CVE-2008-5091

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Novell eDirectory versions 8.7.3 before SP10a Novell eDirectory versions 8.8 before SP3

Description The issue is related to a buffer overflow in the LDAP Service, which can be triggered by an invalid extensibleMatch filter, leading to a denial of service where the application crashes.

Recommendations For Novell eDirectory version 8.7.3, update to SP10a or later to resolve the issue. For Novell eDirectory version 8.8, update to SP3 or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-5091

Affected Products

Novell Edirectory

References · 9

• http://novell.com/documentation/edir873/sp10_readme/netware/readme.txt · Vendor Advisory
• http://novell.com/support/viewContent.do?externalId=3426981 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-5091 · Security Note
• http://novell.com/support/viewContent.do?externalId=3477912 · Note
• http://vupen.com/english/advisories/2008/2462 · Note
• http://securitytracker.com/id?1020788 · Note
• https://bugzilla.novell.com/show_bug.cgi?id=373853 · Note
• http://securityfocus.com/bid/30947 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43590 · Note