CVE-2008-0927

Currently unrated

Key Information:

Vendor
Microsoft
Status
Windows-nt
Vendor
CVE Published:
14 April 2008

Summary

dhost.exe in Novell eDirectory 8.7.3 before sp10 and 8.8.2 allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with (1) multiple Connection headers or (2) a Connection header with multiple comma-separated values. NOTE: this might be similar to CVE-2008-1777.

References

http://www.securityfocus.com/archive/1/491622/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securitytracker.com/id?1019836
vdb-entryx_refsource_SECTRACK
http://secunia.com/advisories/29805
third-party-advisoryx_refsource_SECUNIA

EPSS Score

90% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.