CVE-2008-0924

Novell eDirectory < 8.7.3.9 and 8.8.x <= 8.8.1 - Stack-Based Buffer Overflow via Long delRequest LDAP Extended Request

Title source: llm
STIX 2.1

Description

Stack-based buffer overflow in the DoLBURPRequest function in libnldap in ndsd in Novell eDirectory 8.7.3.9 and earlier, and 8.8.1 and earlier in the 8.8.x series, allows remote attackers to cause a denial of service (daemon crash or CPU consumption) or execute arbitrary code via a long delRequest LDAP Extended Request message, probably involving a long Distinguished Name (DN) field.

References (7)

Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1019692
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/0987/references
Third Party Advisory, VDB Entry x_refsource_misc
http://www.zerodayinitiative.com/advisories/ZDI-08-013/
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29476
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/28434
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/490117/100/0/threaded

Scores

EPSS 0.0389
EPSS Percentile 88.4%

Details

CWE
CWE-119
Status published
Products (1)
novell/edirectory 8.7 - 8.7.3.9
Published Mar 28, 2008
Tracked Since Feb 18, 2026