CVE-2008-5091: Buffer Overflow
Published Nov 14, 2008
·Updated
Buffer overflow in the LDAP Service in Novell eDirectory 8.7.3 before SP10a and 8.8 before SP3 allows attackers to cause a denial of service (application crash) via vectors involving an "invalid extensibleMatch filter."
Affected Software
41 affected components
Novell eDirectory=8.7.3.9
Novell eDirectory=8.6.2
Novell eDirectory=8.5.27
Novell eDirectory=8.7
Novell eDirectory=8.8
Novell eDirectory=8.8.1
Novell eDirectory=8.8
Novell eDirectory=8.0
Novell eDirectory=8.7.3.9
Novell eDirectory=8.7.3
Novell eDirectory=8.7.3-sp4
Novell eDirectory=8.8
Novell eDirectory=8.8
Novell eDirectory=8.7.3-sp1
Novell eDirectory=8.5.12a
Novell eDirectory=8.8.1
Novell eDirectory=8.7.3-sp8
Novell eDirectory<=8.8
Novell eDirectory=8.8.1
Novell eDirectory=8.7.3.10
Novell eDirectory=8.8.2
Novell eDirectory=8.7.3.9
Novell eDirectory=8.5
Novell eDirectory=8.8.2
Novell eDirectory=8.8.2
Novell eDirectory=8.7.3-sp3
Novell eDirectory=8.8.2
Novell eDirectory=8.7.3-sp6
Novell eDirectory=8.7.3.9
Novell eDirectory=8.7.3.8_presp9
Novell eDirectory=8.8.2
Novell eDirectory=8.7.1
Novell eDirectory=8.7.1-sp1
Novell eDirectory=8.7.3-sp7
Novell eDirectory=8.7.3.8
Novell eDirectory=8.8.1
Novell eDirectory=8.8
Novell eDirectory=8.8.1
Novell eDirectory=8.7.3-sp2
Novell eDirectory=8.7.3-sp9
Novell eDirectory=8.7.3.9
Event History
Nov 14, 2008
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-5091?
CVE-2008-5091 has a severity rating that indicates it can lead to a denial of service through application crashes.
2
How do I fix CVE-2008-5091?
To fix CVE-2008-5091, update to Novell eDirectory version 8.7.3 SP10a or later, or 8.8 SP3 or later.
3
What systems are affected by CVE-2008-5091?
CVE-2008-5091 affects Novell eDirectory versions 8.7.3 before SP10a and 8.8 before SP3, among others.
4
What type of vulnerability is CVE-2008-5091?
CVE-2008-5091 is identified as a buffer overflow vulnerability within the LDAP service.
5
Can CVE-2008-5091 be exploited remotely?
Yes, CVE-2008-5091 can be exploited remotely by sending an invalid extensibleMatch filter to the LDAP service.