CVE-2008-0927: Medium severity micro focus netiq edirectory vulnerability
dhost.exe in Novell eDirectory 8.7.3 before sp10 and 8.8.2 allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with (1) multiple Connection headers or (2) a Connection header with multiple comma-separated values. NOTE: this might be similar to CVE-2008-1777.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0927?
CVE-2008-0927 is classified as a denial of service vulnerability that can lead to CPU consumption issues.
How do I fix CVE-2008-0927?
To fix CVE-2008-0927, upgrade to Novell eDirectory version 8.8.2 or later or apply the latest patches for earlier versions.
Which versions of eDirectory are affected by CVE-2008-0927?
CVE-2008-0927 affects Novell eDirectory versions prior to 8.7.3 SP10 and versions 8.8.1 and earlier.
What is the impact of exploiting CVE-2008-0927?
Exploiting CVE-2008-0927 can result in denial of service, rendering the eDirectory unresponsive due to high CPU usage.
Is CVE-2008-0927 exploitable remotely?
Yes, CVE-2008-0927 can be exploited remotely via crafted HTTP requests.