CVE-2008-1809

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-07-14 · updated 2026-06-16
Weakness: CWE-119

Description

Heap-based buffer overflow in Novell eDirectory 8.7.3 before 8.7.3.10b, and 8.8 before 8.8.2 FTF2, allows remote attackers to execute arbitrary code via an LDAP search request containing "NULL search parameters."

Affected products

Novell eDirectory: 8.7.3, 8.8

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=724
http://secunia.com/advisories/31036
http://www.novell.com/support/viewContent.do?externalId=3843876
http://www.securityfocus.com/bid/30175
http://www.securitytracker.com/id?1020470
http://www.vupen.com/english/advisories/2008/2062/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/43716
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=724
http://secunia.com/advisories/31036
http://www.novell.com/support/viewContent.do?externalId=3843876
http://www.securityfocus.com/bid/30175
http://www.securitytracker.com/id?1020470

Get alerted when CVE-2008-1809 or the next vulnerability affects your stack