CVE-2008-5094: Buffer Overflow
Published Nov 14, 2008
·Updated
Heap-based buffer overflow in the NDS Service in Novell eDirectory before 8.8 SP3 has unknown impact and attack vectors.
Affected Software
42 affected components
Novell eDirectory
Novell eDirectory<=8.8
Novell eDirectory=8.0
Novell eDirectory=8.5.12a
Novell eDirectory=8.5.27
Novell eDirectory=8.6.2
Novell eDirectory=8.7
Novell eDirectory=8.7.1
Novell eDirectory=8.7.1-sp1
Novell eDirectory=8.7.3
Novell eDirectory=8.7.3-sp1
Novell eDirectory=8.7.3-sp2
Novell eDirectory=8.7.3-sp3
Novell eDirectory=8.7.3-sp4
Novell eDirectory=8.7.3-sp5
Novell eDirectory=8.7.3-sp6
Novell eDirectory=8.7.3-sp7
Novell eDirectory=8.7.3-sp8
Novell eDirectory=8.7.3-sp9
Novell eDirectory=8.7.3.8
Novell eDirectory=8.7.3.8_presp9
Novell eDirectory=8.7.3.9
Novell eDirectory=8.7.3.9
Novell eDirectory=8.7.3.9
Novell eDirectory=8.7.3.9
Novell eDirectory=8.7.3.9
Novell eDirectory=8.7.3.10
Novell eDirectory=8.8
Novell eDirectory=8.8
Novell eDirectory=8.8
Novell eDirectory=8.8
Novell eDirectory=8.8
Novell eDirectory=8.8.1
Novell eDirectory=8.8.1
Novell eDirectory=8.8.1
Novell eDirectory=8.8.1
Novell eDirectory=8.8.1
Novell eDirectory=8.8.2
Novell eDirectory=8.8.2
Novell eDirectory=8.8.2
Novell eDirectory=8.8.2
Novell eDirectory=8.8.2
Event History
Nov 14, 2008
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-5094?
The severity of CVE-2008-5094 is currently unknown due to the lack of publicly disclosed attack vectors.
2
How do I fix CVE-2008-5094?
To fix CVE-2008-5094, ensure that you update Novell eDirectory to version 8.8 SP3 or later.
3
Who is affected by CVE-2008-5094?
CVE-2008-5094 affects multiple versions of Novell eDirectory, particularly those before 8.8 SP3.
4
What type of vulnerability is CVE-2008-5094?
CVE-2008-5094 is classified as a heap-based buffer overflow vulnerability.
5
Can CVE-2008-5094 be exploited remotely?
The exact attack vectors for CVE-2008-5094 are unknown, so it is unclear if it can be exploited remotely.