CVE-2009-0895

Published: Dec 3, 2009Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Integer overflow in Novell eDirectory 8.7.3.x before 8.7.3.10 ftf2 and 8.8.x before 8.8.5.2 allows remote attackers to execute arbitrary code via an NDS Verb 0x1 request containing a large integer value that triggers a heap-based buffer overflow.

Affected (22)

Products: Novell: Edirectory

Novell

1 product

Edirectory

Configuration A

22 vulnerable

Vulnerable Software	Affected Versions
Novell Edirectory	Version 8.7.3.10
Novell Edirectory	Version 8.7.3.8
Novell Edirectory	Version 8.7.3.9
Novell Edirectory	Version 8.7.3
Novell Edirectory	Version 8.7.3 sp10
Novell Edirectory	Version 8.7.3 sp10
Novell Edirectory	Version 8.7.3 sp10_b
Novell Edirectory	Version 8.7.3 sp3
Novell Edirectory	Version 8.7.3 sp3
Novell Edirectory	Version 8.7.3 sp4
Novell Edirectory	Version 8.7.3 sp4
Novell Edirectory	Version 8.7.3 sp5
Novell Edirectory	Version 8.7.3 sp5
Novell Edirectory	Version 8.8.1
Novell Edirectory	Version 8.8.2
Novell Edirectory	Version 8.8.2
Novell Edirectory	Version 8.8.5
Novell Edirectory	Version 8.8
Novell Edirectory	Version 8.8 sp1
Novell Edirectory	Version 8.8 sp2
Novell Edirectory	Version 8.8 sp3
Novell Edirectory	Version 8.8 sp4