Approved changes feed: RSS · Atom

cpe:2.3:a:novell:edirectory:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNovell (4a1c187d-e568-531f-92b0-685a3df2807c)
ProductEdirectory (f3d3857d-04cc-5212-b3f1-fdbdc65a2dd0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-9277 vulnerable 2026-06-08 05:10:09.560261 existing connection is being used even though eDirectory LDAP server is upgraded to EBA
MEDIUM (4.2)
The LDAP backend in Novell eDirectory before 9.0 SP4 when switched to EBA (Enhanced Background Authentication) kept open connections without EBA.
Published: 2018-03-02T20:00:00.000Z
Updated: 2024-09-17T00:06:48.365Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-9267 vulnerable 2026-06-08 05:10:09.543723 eDirectory LDAP peer certificate validation issue
MEDIUM (6.5)
In Novell eDirectory before 9.0.3.1 the LDAP interface was not strictly enforcing cipher restrictions allowing weaker ciphers to be used during SSL BIND operations.
Published: 2018-03-02T20:00:00.000Z
Updated: 2024-09-16T17:52:55.859Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5747 vulnerable 2026-06-08 05:07:57.682020 Details available
A security vulnerability in cookie handling in the http stack implementation in NDSD in Novell eDirectory before 9.0.1 allows remote attackers to bypass intended access restrictions by leveraging predictable cookies.
Published: 2017-03-23T06:36:00.000Z
Updated: 2024-08-06T01:08:00.805Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0666 vulnerable 2026-06-08 04:52:03.858536 Details available
Unspecified vulnerability in eMBox in Novell eDirectory 8.8 SP5 Patch 2 and earlier allows remote attackers to cause a denial of service (crash) via unknown a crafted SOAP request, a different issue than CVE-2008-0926.
Published: 2010-02-19T17:00:00.000Z
Updated: 2024-09-17T03:12:27.054Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5094 vulnerable 2026-06-08 04:50:49.503007 Details available
Heap-based buffer overflow in the NDS Service in Novell eDirectory before 8.8 SP3 has unknown impact and attack vectors.
Published: 2008-11-14T19:00:00.000Z
Updated: 2024-08-07T10:40:17.038Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5093 vulnerable 2026-06-08 04:50:49.501815 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5038 vulnerable 2026-06-08 04:50:49.201429 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4480 vulnerable 2026-06-08 04:50:39.070884 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4479 vulnerable 2026-06-08 04:50:39.070448 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4478 vulnerable 2026-06-08 04:50:39.057263 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0927 not_vulnerable 2026-06-08 04:50:18.258884 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0926 vulnerable 2026-06-08 04:50:18.251778 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0924 vulnerable 2026-06-08 04:50:18.241742 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5814 vulnerable 2026-06-08 04:49:21.337417 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5479 vulnerable 2026-06-08 04:49:20.630011 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4520 vulnerable 2026-06-08 04:49:18.087422 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4177 vulnerable 2026-06-08 04:49:11.156114 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.