CVE-2009-4654

Currently unrated

Key Information:

Vendor
Novell
Status
Edirectory
Vendor
CVE Published:
26 February 2010

Summary

Stack-based buffer overflow in the dhost module in Novell eDirectory 8.8 SP5 for Windows allows remote authenticated users to execute arbitrary code via long sadminpwd and verifypwd parameters in a submit action to /dhost/httpstk.

References

http://www.securityfocus.com/bid/37042
vdb-entryx_refsource_BID
http://tcc.hellcode.net/advisories/hellcode-adv005.txt
x_refsource_MISC
http://downloads.securityfocus.com/vulnerabilities/exploi...
x_refsource_MISC

EPSS Score

71% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.