Approved changes feed: RSS · Atom

cpe:2.3:a:novell:edirectory:8.7.3.8:*:*:*:*:*:*:*

part: a version: 8.7.3.8 update: *

VendorNovell (4a1c187d-e568-531f-92b0-685a3df2807c)
ProductEdirectory (f3d3857d-04cc-5212-b3f1-fdbdc65a2dd0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-0666 vulnerable 2026-06-08 04:52:03.863019 Details available
Unspecified vulnerability in eMBox in Novell eDirectory 8.8 SP5 Patch 2 and earlier allows remote attackers to cause a denial of service (crash) via unknown a crafted SOAP request, a different issue than CVE-2008-0926.
Published: 2010-02-19T17:00:00.000Z
Updated: 2024-09-17T03:12:27.054Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3862 vulnerable 2026-06-08 04:51:44.525592 Details available
The NDSD process in Novell eDirectory 8.7.3 before 8.7.3.10 ftf2 and eDirectory 8.8 before 8.8.5 ftf1 does not properly handle certain LDAP search requests, which allows remote attackers to cause a denial of service (application hang) via a search request with a NULL BaseDN value.
Published: 2009-11-04T18:00:00.000Z
Updated: 2024-08-07T06:45:51.084Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0895 vulnerable 2026-06-08 04:51:11.943055 Details available
Integer overflow in Novell eDirectory 8.7.3.x before 8.7.3.10 ftf2 and 8.8.x before 8.8.5.2 allows remote attackers to execute arbitrary code via an NDS Verb 0x1 request containing a large integer value that triggers a heap-based buffer overflow.
Published: 2009-12-03T17:00:00.000Z
Updated: 2024-08-07T04:48:52.690Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5094 vulnerable 2026-06-08 04:50:49.503334 Details available
Heap-based buffer overflow in the NDS Service in Novell eDirectory before 8.8 SP3 has unknown impact and attack vectors.
Published: 2008-11-14T19:00:00.000Z
Updated: 2024-08-07T10:40:17.038Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5093 vulnerable 2026-06-08 04:50:49.502147 Details available
Cross-site scripting (XSS) vulnerability in the HTTP Protocol Stack (HTTPSTK) in Novell eDirectory before 8.8 SP3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Published: 2008-11-14T19:00:00.000Z
Updated: 2024-08-07T10:40:17.021Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5092 vulnerable 2026-06-08 04:50:49.497686 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5091 vulnerable 2026-06-08 04:50:49.483095 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4478 vulnerable 2026-06-08 04:50:39.059615 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0926 vulnerable 2026-06-08 04:50:18.256759 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4186 vulnerable 2026-06-08 04:49:11.192140 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4185 vulnerable 2026-06-08 04:49:11.191727 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.