CVE-2008-3159

CWE-1893 documents3 sources
Severity
10.0CRITICAL
EPSS
20.4%
top 4.46%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Novell Edirectory
Timeline
PublishedJul 14
Latest updateMay 1

Description

Integer overflow in ds.dlm, as used by dhost.exe, in Novell eDirectory 8.7.3.10 before 8.7.3 SP10b and 8.8 before 8.8.2 ftf2 allows remote attackers to execute arbitrary code via unspecified vectors that trigger a stack-based buffer overflow, related to "flawed arithmetic."

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages1 packages

▶NVDnovell/edirectory8.7.3, 8.8+1

🔴Vulnerability Details

2
GHSA
GHSA-5hq8-x3r7-7389: Integer overflow in ds↗2022-05-01
▶
CVEList
CVE-2008-3159: Integer overflow in ds↗2008-07-14
▶
CVE-2008-3159 (CRITICAL CVSS 10) | Integer overflow in ds.dlm | cvebase.io