Denial of Service Vulnerability in Novell eDirectory Software
CVE-2008-0927

Currently unrated

Key Information:

Vendor

Microsoft
Status
Windows-nt
Vendor
CVE Published:
14 April 2008

What is CVE-2008-0927?

The vulnerability in Novell eDirectory occurs when dhost.exe does not properly handle HTTP requests containing multiple Connection headers or comma-separated values in a single Connection header. This improper handling allows attackers to cause excessive CPU consumption, leading to service interruptions. By executing specially crafted HTTP requests, malicious users can exploit this vulnerability remotely, effectively disrupting the normal operation of the eDirectory service.

References

http://www.securityfocus.com/archive/1/491622/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securitytracker.com/id?1019836
vdb-entryx_refsource_SECTRACK
http://secunia.com/advisories/29805
third-party-advisoryx_refsource_SECUNIA

EPSS Score

85% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.