CVEvulnerability
CVE-2009-3862
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-11-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-287
Description
The NDSD process in Novell eDirectory 8.7.3 before 8.7.3.10 ftf2 and eDirectory 8.8 before 8.8.5 ftf1 does not properly handle certain LDAP search requests, which allows remote attackers to cause a denial of service (application hang) via a search request with a NULL BaseDN value.
Affected configurations
• novell edirectory 8.7.3
• novell edirectory 8.7.3.8
• novell edirectory 8.7.3.9
• novell edirectory 8.8
• novell edirectory 8.8.1
• novell edirectory 8.8.2
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://www.novell.com/support/viewContent.do?externalId=7004721 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/36902 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/3120 Patch, Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-09-075/ Patch
- http://www.novell.com/support/viewContent.do?externalId=7004721 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/36902 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/3120 Patch, Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-09-075/ Patch