CVE-2008-4479

CRITICAL 10.0CVE-2008-4479 · Published 14/10/2008 · updated 16/06/2026

Package	Affected versions	Patched versions
edirectory novell	`≥ 8.7.3, < 8.7.3.10≥ 8.8, < 8.8.3`	`8.7.3.108.8.3`

Description

Heap-based buffer overflow in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.7.3 before 8.7.3.10 ftf1, allows remote attackers to execute arbitrary code via a SOAP request with a long Accept-Language header.

References

secunia.com/advisories/32111 · Third Party Advisory
securityreason.com/securityalert/4405 · Third Party Advisory
support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037180.html · Patch
support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037181.html · Patch
novell.com/support/php/search.do · Vendor Advisory
securityfocus.com/archive/1/497164/100/0/threaded · Third Party Advisory
securitytracker.com/id · Third Party Advisory
vupen.com/english/advisories/2008/2738 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-08-064 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free