Edirectory
Approved changes feed: RSS · Atom
cpe:2.3:a:novell:edirectory:8.8.2:*:*:*:*:*:*:*
part: a version: 8.8.2 update: *
| Vendor | Novell (4a1c187d-e568-531f-92b0-685a3df2807c) |
|---|---|
| Product | Edirectory (f3d3857d-04cc-5212-b3f1-fdbdc65a2dd0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-3862 |
vulnerable | 2026-06-08 04:51:44.529847 |
Details available
The NDSD process in Novell eDirectory 8.7.3 before 8.7.3.10 ftf2 and eDirectory 8.8 before 8.8.5 ftf1 does not properly handle certain LDAP search requests, which allows remote attackers to cause a denial of service (application hang) via a search request with a NULL BaseDN value.
Published: 2009-11-04T18:00:00.000Z
Updated: 2024-08-07T06:45:51.084Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-0895 |
vulnerable | 2026-06-08 04:51:11.948577 |
Details available
Integer overflow in Novell eDirectory 8.7.3.x before 8.7.3.10 ftf2 and 8.8.x before 8.8.5.2 allows remote attackers to execute arbitrary code via an NDS Verb 0x1 request containing a large integer value that triggers a heap-based buffer overflow.
Published: 2009-12-03T17:00:00.000Z
Updated: 2024-08-07T04:48:52.690Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-5094 |
vulnerable | 2026-06-08 04:50:49.503696 |
Details available
Heap-based buffer overflow in the NDS Service in Novell eDirectory before 8.8 SP3 has unknown impact and attack vectors.
Published: 2008-11-14T19:00:00.000Z
Updated: 2024-08-07T10:40:17.038Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-5093 |
vulnerable | 2026-06-08 04:50:49.502450 |
Details available
Cross-site scripting (XSS) vulnerability in the HTTP Protocol Stack (HTTPSTK) in Novell eDirectory before 8.8 SP3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Published: 2008-11-14T19:00:00.000Z
Updated: 2024-08-07T10:40:17.021Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-5092 |
vulnerable | 2026-06-08 04:50:49.498003 |
Details available
Heap-based buffer overflows in Novell eDirectory HTTP protocol stack (HTTPSTK) before 8.8 SP3 have unknown impact and attack vectors related to the (1) HTTP language header and (2) HTTP content-length header.
Published: 2008-11-14T19:00:00.000Z
Updated: 2024-08-07T10:40:17.147Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-5091 |
vulnerable | 2026-06-08 04:50:49.492667 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-4478 |
vulnerable | 2026-06-08 04:50:39.067976 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-1777 |
vulnerable | 2026-06-08 04:50:21.882886 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.