CVE-2009-3862: Medium severity micro focus netiq edirectory vulnerability
The NDSD process in Novell eDirectory 8.7.3 before 8.7.3.10 ftf2 and eDirectory 8.8 before 8.8.5 ftf1 does not properly handle certain LDAP search requests, which allows remote attackers to cause a denial of service (application hang) via a search request with a NULL BaseDN value.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-3862?
CVE-2009-3862 has a severity rating that indicates it can lead to a denial of service by causing the application to hang.
How do I fix CVE-2009-3862?
To fix CVE-2009-3862, upgrade to Novell eDirectory versions 8.7.3.10 ftf2 or 8.8.5 ftf1 or later.
Which versions of Novell eDirectory are affected by CVE-2009-3862?
CVE-2009-3862 affects Novell eDirectory versions 8.7.3 before 8.7.3.10 ftf2 and 8.8 before 8.8.5 ftf1.
Can CVE-2009-3862 be exploited remotely?
Yes, an attacker can exploit CVE-2009-3862 remotely by sending a specially crafted LDAP search request with a NULL BaseDN value.
What impact does CVE-2009-3862 have on Novell eDirectory?
The impact of CVE-2009-3862 on Novell eDirectory is an application hang, resulting in denial of service.