NVD

Id
4301  
Name
CVE-2008-4478  
Description
Multiple integer overflows in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.73 before 8.7.3.10 ftf1, allow remote attackers to execute arbitrary code via a crafted (1) Content-Length header in a SOAP request or (2) Netware Core Protocol opcode 0x0F message, which triggers a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-10-14  
Modified Date
2011-03-07  
Seq
2008-4478  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
27250 4301 CVE-2008-4478 4406  View
27251 4301 CVE-2008-4478 http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037180.html  View
27252 4301 CVE-2008-4478 http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037181.html  View
27253 4301 CVE-2008-4478 http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7000087&sliceId=1&docTypeID=DT_TID_1_1&dialogID=78066829&stateId=0%200%2078062953  View
27254 4301 CVE-2008-4478 http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7001184&sliceId=1&docTypeID=DT_TID_1_1&dialogID=78066829&stateId=0%200%2078062953  View
27255 4301 CVE-2008-4478 20081008 ZDI-08-063: Novell eDirectory dhost.exe Content-Length Header Heap Overflow Vulnerability  View
27256 4301 CVE-2008-4478 20081008 ZDI-08-065: Novell eDirectory Core Protocol Opcode 0x0F Heap Overflow Vulnerability  View
27257 4301 CVE-2008-4478 1020989  View
27258 4301 CVE-2008-4478 1020990  View
27259 4301 CVE-2008-4478 ADV-2008-2738  View
27260 4301 CVE-2008-4478 http://www.zerodayinitiative.com/advisories/ZDI-08-063  View
27261 4301 CVE-2008-4478 http://www.zerodayinitiative.com/advisories/ZDI-08-065  View
27262 4301 CVE-2008-4478 novell-edirectory-httpcontentlength-dos(45628)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49624 JVNDB-2008-004934 Novell eDirectory の dhost.exe における整数オーバーフローの脆弱性 Novell eDirectory の dhost.exe には、整数オーバーフローの脆弱性が存在します。 CVE-2008-4478 34591 CVE-2008-4478 4301 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004934.html 2008-10-14 2012-09-25 View