CVEvulnerability

CVE-2008-5038

9.8 CRITICAL Published 2008-11-12 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-11-12
Last modified
2026-06-16
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-416

Description

Use-after-free vulnerability in the NetWare Core Protocol (NCP) feature in Novell eDirectory 8.7.3 SP10 before 8.7.3 SP10 FTF1 and 8.8 SP2 for Windows allows remote attackers to cause a denial of service and possibly execute arbitrary code via a sequence of "Get NCP Extension Information By Name" requests that cause one thread to operate on memory after it has been freed in another thread, which triggers memory corruption, aka Novell Bug 373852.

Affected configurations

• novell edirectory (< 8.7.3) • novell edirectory 8.7.3 • novell edirectory 8.8

Related

Weakness · CWE (1)

Referenced by CWE · observed example (1)

References