Buffer Overflow Vulnerability in Novell eDirectory's iMonitor Component
CVE-2009-0192

Currently unrated

Key Information:

Vendor
Novell
Status
Edirectory
Vendor
CVE Published:
14 July 2009

Summary

The iMonitor component in Novell eDirectory contains an off-by-one error that can be exploited through a specially crafted HTTP request. By manipulating the Accept-Language header, attackers can trigger a stack-based buffer overflow, potentially allowing them to execute arbitrary code. This type of vulnerability underscores the need for rigorous input validation and security measures to prevent unauthorized access and system compromise.

References

http://secunia.com/advisories/34160
third-party-advisoryx_refsource_SECUNIA
http://www.novell.com/support/viewContent.do?externalId=3...
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/51703
vdb-entryx_refsource_XF

EPSS Score

12% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.