Exploitation Summary
EIP tracks 2 public exploits for CVE-2009-4655.
PoCs published by Metasploit, including Metasploit module auxiliary/admin/edirectory/edirectory_dhost_cookie.
AI-analyzed exploit summary This exploit predicts the next session cookie value issued by the DHOST web service of Novell eDirectory 8.8.5, allowing an attacker to hijack an administrator's session by specifying the predicted cookie value.
Description
The dhost web service in Novell eDirectory 8.8.5 uses a predictable session cookie, which makes it easier for remote attackers to hijack sessions via a modified cookie.
Exploits (2)
This exploit predicts the next session cookie value issued by the DHOST web service of Novell eDirectory 8.8.5, allowing an attacker to hijack an administrator's session by specifying the predicted cookie value.
This Metasploit module exploits a predictable session cookie vulnerability in Novell eDirectory 8.8.5 by analyzing cookie deltas to predict the next session cookie value, enabling session hijacking.