CVE-2009-3862

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-11-04 · updated 2026-06-16
Weakness: CWE-287

Description

The NDSD process in Novell eDirectory 8.7.3 before 8.7.3.10 ftf2 and eDirectory 8.8 before 8.8.5 ftf1 does not properly handle certain LDAP search requests, which allows remote attackers to cause a denial of service (application hang) via a search request with a NULL BaseDN value.

Affected products

Novell eDirectory: 8.7.3, 8.7.3-sp2, 8.7.3-sp3, 8.7.3-sp4, 8.7.3-sp5, 8.7.3-sp6 (+12)

References

http://www.novell.com/support/viewContent.do?externalId=7004721
http://www.securityfocus.com/bid/36902
http://www.vupen.com/english/advisories/2009/3120
http://www.zerodayinitiative.com/advisories/ZDI-09-075/
http://www.novell.com/support/viewContent.do?externalId=7004721
http://www.securityfocus.com/bid/36902
http://www.vupen.com/english/advisories/2009/3120
http://www.zerodayinitiative.com/advisories/ZDI-09-075/

Get alerted when CVE-2009-3862 or the next vulnerability affects your stack