Approved changes feed: RSS · Atom

cpe:2.3:a:novell:edirectory:8.8.1:*:*:*:*:*:*:*

part: a version: 8.8.1 update: *

VendorNovell (4a1c187d-e568-531f-92b0-685a3df2807c)
ProductEdirectory (f3d3857d-04cc-5212-b3f1-fdbdc65a2dd0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-3862 vulnerable 2026-06-08 04:51:44.529337 Details available
The NDSD process in Novell eDirectory 8.7.3 before 8.7.3.10 ftf2 and eDirectory 8.8 before 8.8.5 ftf1 does not properly handle certain LDAP search requests, which allows remote attackers to cause a denial of service (application hang) via a search request with a NULL BaseDN value.
Published: 2009-11-04T18:00:00.000Z
Updated: 2024-08-07T06:45:51.084Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0895 vulnerable 2026-06-08 04:51:11.948000 Details available
Integer overflow in Novell eDirectory 8.7.3.x before 8.7.3.10 ftf2 and 8.8.x before 8.8.5.2 allows remote attackers to execute arbitrary code via an NDS Verb 0x1 request containing a large integer value that triggers a heap-based buffer overflow.
Published: 2009-12-03T17:00:00.000Z
Updated: 2024-08-07T04:48:52.690Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5094 vulnerable 2026-06-08 04:50:49.503551 Details available
Heap-based buffer overflow in the NDS Service in Novell eDirectory before 8.8 SP3 has unknown impact and attack vectors.
Published: 2008-11-14T19:00:00.000Z
Updated: 2024-08-07T10:40:17.038Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5093 vulnerable 2026-06-08 04:50:49.502367 Details available
Cross-site scripting (XSS) vulnerability in the HTTP Protocol Stack (HTTPSTK) in Novell eDirectory before 8.8 SP3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Published: 2008-11-14T19:00:00.000Z
Updated: 2024-08-07T10:40:17.021Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5092 vulnerable 2026-06-08 04:50:49.497915 Details available
Heap-based buffer overflows in Novell eDirectory HTTP protocol stack (HTTPSTK) before 8.8 SP3 have unknown impact and attack vectors related to the (1) HTTP language header and (2) HTTP content-length header.
Published: 2008-11-14T19:00:00.000Z
Updated: 2024-08-07T10:40:17.147Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5091 vulnerable 2026-06-08 04:50:49.490225 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4478 vulnerable 2026-06-08 04:50:39.065559 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4521 vulnerable 2026-06-08 04:49:18.087909 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4520 vulnerable 2026-06-08 04:49:18.087494 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4510 vulnerable 2026-06-08 04:49:18.071465 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4509 vulnerable 2026-06-08 04:49:18.071006 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.