Approved changes feed: RSS · Atom

cpe:2.3:a:novell:edirectory:8.7.3:*:*:*:*:*:*:*

part: a version: 8.7.3 update: *

VendorNovell (4a1c187d-e568-531f-92b0-685a3df2807c)
ProductEdirectory (f3d3857d-04cc-5212-b3f1-fdbdc65a2dd0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-0666 vulnerable 2026-06-08 04:52:03.862546 Details available
Unspecified vulnerability in eMBox in Novell eDirectory 8.8 SP5 Patch 2 and earlier allows remote attackers to cause a denial of service (crash) via unknown a crafted SOAP request, a different issue than CVE-2008-0926.
Published: 2010-02-19T17:00:00.000Z
Updated: 2024-09-17T03:12:27.054Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3862 vulnerable 2026-06-08 04:51:44.521021 Details available
The NDSD process in Novell eDirectory 8.7.3 before 8.7.3.10 ftf2 and eDirectory 8.8 before 8.8.5 ftf1 does not properly handle certain LDAP search requests, which allows remote attackers to cause a denial of service (application hang) via a search request with a NULL BaseDN value.
Published: 2009-11-04T18:00:00.000Z
Updated: 2024-08-07T06:45:51.084Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0895 vulnerable 2026-06-08 04:51:11.936323 Details available
Integer overflow in Novell eDirectory 8.7.3.x before 8.7.3.10 ftf2 and 8.8.x before 8.8.5.2 allows remote attackers to execute arbitrary code via an NDS Verb 0x1 request containing a large integer value that triggers a heap-based buffer overflow.
Published: 2009-12-03T17:00:00.000Z
Updated: 2024-08-07T04:48:52.690Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5094 vulnerable 2026-06-08 04:50:49.503169 Details available
Heap-based buffer overflow in the NDS Service in Novell eDirectory before 8.8 SP3 has unknown impact and attack vectors.
Published: 2008-11-14T19:00:00.000Z
Updated: 2024-08-07T10:40:17.038Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5093 vulnerable 2026-06-08 04:50:49.501983 Details available
Cross-site scripting (XSS) vulnerability in the HTTP Protocol Stack (HTTPSTK) in Novell eDirectory before 8.8 SP3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Published: 2008-11-14T19:00:00.000Z
Updated: 2024-08-07T10:40:17.021Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5092 vulnerable 2026-06-08 04:50:49.495403 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5091 vulnerable 2026-06-08 04:50:49.478648 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4478 vulnerable 2026-06-08 04:50:39.058935 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3159 vulnerable 2026-06-08 04:50:33.275920 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1809 vulnerable 2026-06-08 04:50:21.987982 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0926 vulnerable 2026-06-08 04:50:18.256289 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5479 vulnerable 2026-06-08 04:49:20.630178 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5478 vulnerable 2026-06-08 04:49:20.628723 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4185 vulnerable 2026-06-08 04:49:11.191256 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2551 vulnerable 2026-06-08 04:48:29.666597 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1729 vulnerable 2026-06-08 04:48:27.283162 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.