CVE-2009-3862

Published: Nov 4, 2009Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The NDSD process in Novell eDirectory 8.7.3 before 8.7.3.10 ftf2 and eDirectory 8.8 before 8.8.5 ftf1 does not properly handle certain LDAP search requests, which allows remote attackers to cause a denial of service (application hang) via a search request with a NULL BaseDN value.

Affected (18)

Products: Novell: Edirectory

Novell

1 product

Edirectory

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Novell Edirectory	Version 8.7.3.8
Novell Edirectory	Version 8.7.3.9
Novell Edirectory	Version 8.7.3
Novell Edirectory	Version 8.7.3 sp2
Novell Edirectory	Version 8.7.3 sp3
Novell Edirectory	Version 8.7.3 sp4
Novell Edirectory	Version 8.7.3 sp5
Novell Edirectory	Version 8.7.3 sp6
Novell Edirectory	Version 8.7.3 sp7
Novell Edirectory	Version 8.7.3 sp8
Novell Edirectory	Version 8.7.3 sp9
Novell Edirectory	Version 8.8.1
Novell Edirectory	Version 8.8.2
Novell Edirectory	Version 8.8
Novell Edirectory	Version 8.8 sp1
Novell Edirectory	Version 8.8 sp2
Novell Edirectory	Version 8.8 sp3
Novell Edirectory	Version 8.8 sp4