CVE-2009-0192: Buffer Overflow
Published Jul 14, 2009
·Updated
Off-by-one error in the iMonitor component in Novell eDirectory 8.8 SP3, 8.8 SP3 FTF3, and possibly other versions allows remote attackers to execute arbitrary code via an HTTP request with a crafted Accept-Language header, which triggers a stack-based buffer overflow.
Affected Software
2 affected components
Novell eDirectory=8.8-sp3
Novell eDirectory=8.8-sp3
Event History
Jul 14, 2009
CVE Published
via MITRE·08:16 PM
Data Sourced
via MITRE·08:16 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-0192?
CVE-2009-0192 is rated as high severity due to its potential to allow remote code execution.
2
How do I fix CVE-2009-0192?
To mitigate CVE-2009-0192, update Novell eDirectory to a patched version that addresses this vulnerability.
3
Who is affected by CVE-2009-0192?
CVE-2009-0192 affects users of Novell eDirectory versions 8.8 SP3 and 8.8 SP3 FTF3.
4
What type of vulnerability is CVE-2009-0192?
CVE-2009-0192 is classified as a stack-based buffer overflow vulnerability.
5
What component is involved in CVE-2009-0192?
CVE-2009-0192 involves the iMonitor component of Novell eDirectory.