Denial of Service Vulnerability in Novell eDirectory Software
CVE-2008-0927

Currently unrated

Key Information:

Vendor

Microsoft
Status
Windows-nt
Vendor
CVE Published:
14 April 2008

What is CVE-2008-0927?

The vulnerability in Novell eDirectory occurs when dhost.exe does not properly handle HTTP requests containing multiple Connection headers or comma-separated values in a single Connection header. This improper handling allows attackers to cause excessive CPU consumption, leading to service interruptions. By executing specially crafted HTTP requests, malicious users can exploit this vulnerability remotely, effectively disrupting the normal operation of the eDirectory service.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www.securityfocus.com/archive/1/491622/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securitytracker.com/id?1019836
vdb-entryx_refsource_SECTRACK
http://secunia.com/advisories/29805
third-party-advisoryx_refsource_SECUNIA

EPSS Score

77% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.