CVE-2008-5092

CRITICAL 10.0CVE-2008-5092 · Published 14/11/2008 · updated 16/06/2026

In short

CVE-2008-5092 is a CRITICAL (CVSS 10.0) vulnerability affecting edirectory (novell).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 77.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
edirectory novell	`= 8.0= 8.5= 8.5.12a= 8.5.27= 8.6.2= 8.7= 8.7.1= 8.7.3= 8.7.3.10= 8.7.3.8= 8.7.3.8_presp9= 8.7.3.9= 8.8= 8.8.1= 8.8.2= 85.20≤ 8.8`	No fix yet

Description

Heap-based buffer overflows in Novell eDirectory HTTP protocol stack (HTTPSTK) before 8.8 SP3 have unknown impact and attack vectors related to the (1) HTTP language header and (2) HTTP content-length header.

References

novell.com/support/viewContent.do · Vendor Advisory
securityfocus.com/bid/30947
securitytracker.com/id
vupen.com/english/advisories/2008/2462

More vulnerabilities in edirectory

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

edirectory

novell

= 8.0= 8.5= 8.5.12a= 8.5.27= 8.6.2= 8.7= 8.7.1= 8.7.3= 8.7.3.10= 8.7.3.8= 8.7.3.8_presp9= 8.7.3.9= 8.8= 8.8.1= 8.8.2= 85.20≤ 8.8

No fix yet

More vulnerabilities in edirectory

See all →