Heap-Based Buffer Overflow in Novell eDirectory Product
CVE-2008-4479

Currently unrated

Key Information:

Vendor

Novell
Status
Edirectory
Vendor
CVE Published:
14 October 2008

What is CVE-2008-4479?

A heap-based buffer overflow vulnerability exists in the dhost.exe component of Novell eDirectory versions prior to 8.8.3 and 8.7.3.10 ftf1. This flaw potentially allows remote adversaries to execute arbitrary code by sending a specially crafted SOAP request containing an excessively long Accept-Language header. Organizations using affected versions are encouraged to apply the latest patches to mitigate the risk associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www.novell.com/support/php/search.do?cmd=displayKC...
x_refsource_CONFIRM
http://www.securitytracker.com/id?1020989
vdb-entryx_refsource_SECTRACK
http://www.vupen.com/english/advisories/2008/2738
vdb-entryx_refsource_VUPEN

EPSS Score

26% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.