Denial of Service Vulnerability in Novell eDirectory Software
CVE-2008-0927

Currently unrated

Key Information:

Vendor

Microsoft
Status
Windows-nt
Vendor
CVE Published:
14 April 2008

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 77%

What is CVE-2008-0927?

The vulnerability in Novell eDirectory occurs when dhost.exe does not properly handle HTTP requests containing multiple Connection headers or comma-separated values in a single Connection header. This improper handling allows attackers to cause excessive CPU consumption, leading to service interruptions. By executing specially crafted HTTP requests, malicious users can exploit this vulnerability remotely, effectively disrupting the normal operation of the eDirectory service.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2008-0927 - Proof of Concept

References

http://www.securityfocus.com/archive/1/491622/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securitytracker.com/id?1019836
vdb-entryx_refsource_SECTRACK
http://secunia.com/advisories/29805
third-party-advisoryx_refsource_SECUNIA

EPSS Score

77% chance of being exploited in the next 30 days.

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.