CVE-2008-1809: Buffer Overflow
First published: Mon Jul 14 2008(Updated: )
Heap-based buffer overflow in Novell eDirectory 8.7.3 before 8.7.3.10b, and 8.8 before 8.8.2 FTF2, allows remote attackers to execute arbitrary code via an LDAP search request containing "NULL search parameters."
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microfocus eDirectory | =8.7.3 | |
| Microfocus eDirectory | =8.8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=724
- http://secunia.com/advisories/31036
- http://www.novell.com/support/viewContent.do?externalId=3843876
- http://www.securityfocus.com/bid/30175
- http://www.securitytracker.com/id?1020470
- http://www.vupen.com/english/advisories/2008/2062/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43716
Frequently Asked Questions
What is the severity of CVE-2008-1809?
The severity of CVE-2008-1809 is high due to its potential for remote code execution.
How do I fix CVE-2008-1809?
Fix CVE-2008-1809 by updating Novell eDirectory to version 8.7.3.10b or 8.8.2 FTF2 or later.
What version of Novell eDirectory is affected by CVE-2008-1809?
CVE-2008-1809 affects Novell eDirectory versions 8.7.3 before 8.7.3.10b and 8.8 before 8.8.2 FTF2.
What causes the vulnerability CVE-2008-1809?
CVE-2008-1809 is caused by a heap-based buffer overflow triggered by an LDAP search request with NULL search parameters.
Who can exploit CVE-2008-1809?
CVE-2008-1809 can be exploited by remote attackers with the ability to send specific LDAP search requests.
- agent/type
- agent/severity
- agent/references
- agent/remedy
- agent/author
- agent/softwarecombine
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- agent/weakness
- vendor/novell
- canonical/microfocus edirectory
- version/microfocus edirectory/8.7.3
- version/microfocus edirectory/8.8