Approved changes feed: RSS · Atom

cpe:2.3:a:novell:edirectory:8.5:*:*:*:*:*:*:*

part: a version: 8.5 update: *

VendorNovell (4a1c187d-e568-531f-92b0-685a3df2807c)
ProductEdirectory (f3d3857d-04cc-5212-b3f1-fdbdc65a2dd0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-0666 vulnerable 2026-06-08 04:52:03.859134 Details available
Unspecified vulnerability in eMBox in Novell eDirectory 8.8 SP5 Patch 2 and earlier allows remote attackers to cause a denial of service (crash) via unknown a crafted SOAP request, a different issue than CVE-2008-0926.
Published: 2010-02-19T17:00:00.000Z
Updated: 2024-09-17T03:12:27.054Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5092 vulnerable 2026-06-08 04:50:49.495288 Details available
Heap-based buffer overflows in Novell eDirectory HTTP protocol stack (HTTPSTK) before 8.8 SP3 have unknown impact and attack vectors related to the (1) HTTP language header and (2) HTTP content-length header.
Published: 2008-11-14T19:00:00.000Z
Updated: 2024-08-07T10:40:17.147Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5091 vulnerable 2026-06-08 04:50:49.475208 Details available
Buffer overflow in the LDAP Service in Novell eDirectory 8.7.3 before SP10a and 8.8 before SP3 allows attackers to cause a denial of service (application crash) via vectors involving an "invalid extensibleMatch filter."
Published: 2008-11-14T19:00:00.000Z
Updated: 2024-08-07T10:40:17.172Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0926 vulnerable 2026-06-08 04:50:18.252672 Details available
The SOAP interface to the eMBox module in Novell eDirectory 8.7.3.9 and earlier, and 8.8.x before 8.8.2, relies on client-side authentication, which allows remote attackers to bypass authentication via requests for /SOAP URIs, and cause a denial of service (daemon shutdown) or read arbitrary files. NOTE: it was later reported that 8.7.3.10 (aka 8.7.3 SP10) is also affected.
Published: 2008-03-28T18:00:00.000Z
Updated: 2024-08-07T08:01:40.083Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5479 vulnerable 2026-06-08 04:49:20.630055 Details available
The NCP Engine in Novell eDirectory before 8.7.3.8 FTF1 allows remote attackers to cause an unspecified denial of service via a certain "NCP Fragment."
Published: 2006-10-24T20:00:00.000Z
Updated: 2024-09-16T17:08:22.705Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5478 vulnerable 2026-06-08 04:49:20.621806 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0112 vulnerable 2026-06-08 04:47:48.576836 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0081 vulnerable 2026-06-08 04:47:48.457271 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0079 vulnerable 2026-06-08 04:47:48.358832 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.