CVE-2008-1809

Related Files

iDEFENSE Security Advisory 2008-07-09.1

Posted Jul 10, 2008

Authored by iDefense Labs | Site idefense.com

iDefense Security Advisory 07.09.08 - Remote exploitation of a heap buffer overflow vulnerability in Novell Inc.'s eDirectory could allow an attacker to execute arbitrary code with the privileges of the affected service. The vulnerability exists due to an incorrect calculation when allocating a heap buffer to store the search parameters. By passing NULL search parameters, it is possible to overflow a heap based buffer with the string "(null)". This can result in the corruption of heap management structures, and depending on the layout of the heap, possibly function pointers. iDefense has confirmed the existence of this vulnerability in eDirectory version 8.8 SP2 for Linux. Other versions may also be affected.

tags | advisory, remote, overflow, arbitrary

systems | linux

advisories | CVE-2008-1809

SHA-256 | 627e6dd7ce09a52c670678f4c422f600ab53d2e3e6fcfe6e750bf708d64d17c2

Download | Favorite | View