CVEvulnerability
CVE-2008-3159
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-07-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-189
Description
Integer overflow in ds.dlm, as used by dhost.exe, in Novell eDirectory 8.7.3.10 before 8.7.3 SP10b and 8.8 before 8.8.2 ftf2 allows remote attackers to execute arbitrary code via unspecified vectors that trigger a stack-based buffer overflow, related to "flawed arithmetic."
Affected configurations
• novell edirectory 8.7.3
• novell edirectory 8.8
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/30938 Vendor Advisory
- http://securitytracker.com/id?1020431 securitytracker.com
- http://www.novell.com/support/search.do?cmd=displayKC&sliceId=SAL_Public&externalId=3694858 www.novell.com
- http://www.securityfocus.com/bid/30085 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/1999 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-08-041/ www.zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43589 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/30938 Vendor Advisory
- http://securitytracker.com/id?1020431 securitytracker.com
- http://www.novell.com/support/search.do?cmd=displayKC&sliceId=SAL_Public&externalId=3694858 www.novell.com
- http://www.securityfocus.com/bid/30085 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/1999 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-08-041/ www.zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43589 exchange.xforce.ibmcloud.com