CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-4478

Multiple integer overflows in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.73 before 8.7.3.10 ftf1, allow remote attackers to execute arbitrary code via a crafted (1) Content-Length header in a SOAP request or (2) Netware Core Protocol opcode 0x0F message, which triggers a heap-based buffer overflow.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.659

EPSS Ranking 98.4%

CVSS Severity

CVSS v2 Score 10.0

References

Products affected by CVE-2008-4478

Novell » Edirectory » Version: N/A

cpe:2.3:a:novell:edirectory:-
Novell » Edirectory » Version: 8.0

cpe:2.3:a:novell:edirectory:8.0
Novell » Edirectory » Version: 8.5

cpe:2.3:a:novell:edirectory:8.5
Novell » Edirectory » Version: 8.5.12a

cpe:2.3:a:novell:edirectory:8.5.12a
Novell » Edirectory » Version: 8.5.27

cpe:2.3:a:novell:edirectory:8.5.27
Novell » Edirectory » Version: 8.6.2

cpe:2.3:a:novell:edirectory:8.6.2
Novell » Edirectory » Version: 8.7

cpe:2.3:a:novell:edirectory:8.7
Novell » Edirectory » Version: 8.7.1

cpe:2.3:a:novell:edirectory:8.7.1
Novell » Edirectory » Version: 8.7.3

cpe:2.3:a:novell:edirectory:8.7.3
Novell » Edirectory » Version: 8.7.3.10

cpe:2.3:a:novell:edirectory:8.7.3.10
Novell » Edirectory » Version: 8.7.3.8

cpe:2.3:a:novell:edirectory:8.7.3.8
Novell » Edirectory » Version: 8.7.3.8_presp9

cpe:2.3:a:novell:edirectory:8.7.3.8_presp9
Novell » Edirectory » Version: 8.7.3.9

cpe:2.3:a:novell:edirectory:8.7.3.9
Novell » Edirectory » Version: 8.8

cpe:2.3:a:novell:edirectory:8.8
Novell » Edirectory » Version: 8.8.1

cpe:2.3:a:novell:edirectory:8.8.1
Novell » Edirectory » Version: 8.8.2

cpe:2.3:a:novell:edirectory:8.8.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-4478

Products

Pricing

Contact Us