CVE-2009-4486

CWE-119 — Buffer Overflow3 documents3 sources
Severity
7.5HIGH
EPSS
26.8%
top 3.65%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Novell Imanager
Timeline
PublishedJan 8
Latest updateMay 2

Description

Stack-based buffer overflow in the eDirectory plugin in Novell iManager before 2.7.3 allows remote attackers to execute arbitrary code via vectors that trigger long arguments to an unspecified sub-application, related to importing and exporting from a schema.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDnovell/imanager2.7.2+6

Patches

Patch: www.securityfocus.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-7vf7-7vgg-5pp8: Stack-based buffer overflow in the eDirectory plugin in Novell iManager before 2↗2022-05-02
▶
CVEList
CVE-2009-4486: Stack-based buffer overflow in the eDirectory plugin in Novell iManager before 2↗2010-01-08
▶
CVE-2009-4486 (HIGH CVSS 7.5) | Stack-based buffer overflow in the | cvebase.io