CVE-2008-5092 Memory corruption in n/a

Critical 10.0 Published 14 Nov 2008 Updated 7 Aug 2024

Heap-based buffer overflows in Novell eDirectory HTTP stack allow attackers to execute arbitrary code or cause denial of service via crafted headers.

Exploited in the wild: Not known
Login needed: Not stated
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2008-5092?

CVE-2008-5092 is a critical memory corruption vulnerability in Novell Edirectory, published on 14 Nov 2008. It can be exploited over the network, with no action from the victim.

Official description

Heap-based buffer overflows in Novell eDirectory HTTP protocol stack (HTTPSTK) before 8.8 SP3 have unknown impact and attack vectors related to the (1) HTTP language header and (2) HTTP content-length header.

Weakness: CWE-119

Which versions are affected by CVE-2008-5092?

It affects 1 product.

Products include Novell Edirectory.

How do I fix CVE-2008-5092?

No fix has been published for CVE-2008-5092 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2008-5092 being exploited?

There is no known exploitation of CVE-2008-5092 in the wild and no public exploit code.

All Novell Edirectory vulnerabilities

Sources

Also known as GHSA-rv4m-vmcf-vc52.