CVE-2008-1809: Buffer Overflow
Published Jul 14, 2008
·Updated
Heap-based buffer overflow in Novell eDirectory 8.7.3 before 8.7.3.10b, and 8.8 before 8.8.2 FTF2, allows remote attackers to execute arbitrary code via an LDAP search request containing "NULL search parameters."
Affected Software
2 affected components
Novell eDirectory=8.8
Novell eDirectory=8.7.3
Remediation
Event History
Jul 14, 2008
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-1809?
The severity of CVE-2008-1809 is high due to its potential for remote code execution.
2
How do I fix CVE-2008-1809?
Fix CVE-2008-1809 by updating Novell eDirectory to version 8.7.3.10b or 8.8.2 FTF2 or later.
3
What version of Novell eDirectory is affected by CVE-2008-1809?
CVE-2008-1809 affects Novell eDirectory versions 8.7.3 before 8.7.3.10b and 8.8 before 8.8.2 FTF2.
4
What causes the vulnerability CVE-2008-1809?
CVE-2008-1809 is caused by a heap-based buffer overflow triggered by an LDAP search request with NULL search parameters.
5
Who can exploit CVE-2008-1809?
CVE-2008-1809 can be exploited by remote attackers with the ability to send specific LDAP search requests.