Approved changes feed: RSS · Atom

cpe:2.3:a:novell:edirectory:8.7.3.9:*:windows_2003:*:*:*:*:*

part: a version: 8.7.3.9 update: *

VendorNovell (4a1c187d-e568-531f-92b0-685a3df2807c)
ProductEdirectory (f3d3857d-04cc-5212-b3f1-fdbdc65a2dd0)
Editionwindows_2003
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-5094 vulnerable 2026-06-08 04:50:49.503437 Details available
Heap-based buffer overflow in the NDS Service in Novell eDirectory before 8.8 SP3 has unknown impact and attack vectors.
Published: 2008-11-14T19:00:00.000Z
Updated: 2024-08-07T10:40:17.038Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5093 vulnerable 2026-06-08 04:50:49.502251 Details available
Cross-site scripting (XSS) vulnerability in the HTTP Protocol Stack (HTTPSTK) in Novell eDirectory before 8.8 SP3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Published: 2008-11-14T19:00:00.000Z
Updated: 2024-08-07T10:40:17.021Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5092 vulnerable 2026-06-08 04:50:49.497796 Details available
Heap-based buffer overflows in Novell eDirectory HTTP protocol stack (HTTPSTK) before 8.8 SP3 have unknown impact and attack vectors related to the (1) HTTP language header and (2) HTTP content-length header.
Published: 2008-11-14T19:00:00.000Z
Updated: 2024-08-07T10:40:17.147Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5091 vulnerable 2026-06-08 04:50:49.486197 Details available
Buffer overflow in the LDAP Service in Novell eDirectory 8.7.3 before SP10a and 8.8 before SP3 allows attackers to cause a denial of service (application crash) via vectors involving an "invalid extensibleMatch filter."
Published: 2008-11-14T19:00:00.000Z
Updated: 2024-08-07T10:40:17.172Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4478 vulnerable 2026-06-08 04:50:39.062747 Details available
Multiple integer overflows in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.73 before 8.7.3.10 ftf1, allow remote attackers to execute arbitrary code via a crafted (1) Content-Length header in a SOAP request or (2) Netware Core Protocol opcode 0x0F message, which triggers a heap-based buffer overflow.
Published: 2008-10-14T22:00:00.000Z
Updated: 2024-08-07T10:17:09.824Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0925 vulnerable 2026-06-08 04:50:18.244936 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.