Vulnerability Details CVE-2008-5092
Heap-based buffer overflows in Novell eDirectory HTTP protocol stack (HTTPSTK) before 8.8 SP3 have unknown impact and attack vectors related to the (1) HTTP language header and (2) HTTP content-length header.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 45.6%
CVSS Severity
CVSS v2 Score 10.0
References
- http://www.novell.com/support/viewContent.do?externalId=3426981
- http://www.securityfocus.com/bid/30947
- http://www.securitytracker.com/id?1020786
- http://www.vupen.com/english/advisories/2008/2462
- http://www.novell.com/support/viewContent.do?externalId=3426981
- http://www.securityfocus.com/bid/30947
- http://www.securitytracker.com/id?1020786
- http://www.vupen.com/english/advisories/2008/2462
Products affected by CVE-2008-5092
-
cpe:2.3:a:novell:edirectory:8.0
-
cpe:2.3:a:novell:edirectory:8.5
-
cpe:2.3:a:novell:edirectory:8.5.12a
-
cpe:2.3:a:novell:edirectory:8.5.27
-
cpe:2.3:a:novell:edirectory:8.6.2
-
cpe:2.3:a:novell:edirectory:8.7
-
cpe:2.3:a:novell:edirectory:8.7.1
-
cpe:2.3:a:novell:edirectory:8.7.3
-
cpe:2.3:a:novell:edirectory:8.7.3.10
-
cpe:2.3:a:novell:edirectory:8.7.3.8
-
cpe:2.3:a:novell:edirectory:8.7.3.8_presp9
-
cpe:2.3:a:novell:edirectory:8.7.3.9
-
cpe:2.3:a:novell:edirectory:8.8
-
cpe:2.3:a:novell:edirectory:8.8.1
-
cpe:2.3:a:novell:edirectory:8.8.2
-
cpe:2.3:a:novell:edirectory:85.20