CVE-2008-0927

MEDIUM 5.0CVE-2008-0927 · Published 14/04/2008 · updated 16/06/2026

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

dhost.exe in Novell eDirectory 8.7.3 before sp10 and 8.8.2 allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with (1) multiple Connection headers or (2) a Connection header with multiple comma-separated values. NOTE: this might be similar to CVE-2008-1777.

References

secunia.com/advisories/29805 · Third Party Advisory
novell.com/support/viewContent.do · Vendor Advisory
securityfocus.com/archive/1/491622/100/0/threaded · Third Party Advisory
securityfocus.com/bid/28757 · Third Party Advisory
securitytracker.com/id · Third Party Advisory
vupen.com/english/advisories/2008/1217/references · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/41787 · Third Party Advisory
exploit-db.com/exploits/5547 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free