CVE-2008-5038
Use-after-free vulnerability in the NetWare Core Protocol (NCP) feature in Novell eDirectory 8.7.3 SP10 before 8.7.3 SP10 FTF1 and 8.8 SP2 for Windows allows remote attackers to cause a denial of service and possibly execute arbitrary code via a…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (6.21%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Use-after-free vulnerability in the NetWare Core Protocol (NCP) feature in Novell eDirectory 8.7.3 SP10 before 8.7.3 SP10 FTF1 and 8.8 SP2 for Windows allows remote attackers to cause a denial of service and possibly execute arbitrary code via a sequence of "Get NCP Extension Information By Name" requests that cause one thread to operate on memory after it has been freed in another thread, which triggers memory corruption, aka Novell Bug 373852.
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 6.21% probability · 93th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-416
- Affected
- novell/edirectory
- Source
- cve@mitre.org
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=748Broken Link
- http://osvdb.org/48206Broken Link
- http://secunia.com/advisories/32395Broken Link, Vendor Advisory
- http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037180.htmlBroken Link, Patch, Vendor Advisory
- http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037181.htmlBroken Link, Patch
- http://www.novell.com/support/viewContent.do?externalId=3426981Broken Link
- http://www.securityfocus.com/bid/31956Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1021117Broken Link, Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2008/2937Broken Link, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46138Third Party Advisory, VDB Entry
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=748Broken Link
- http://osvdb.org/48206Broken Link
- http://secunia.com/advisories/32395Broken Link, Vendor Advisory
- http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037180.htmlBroken Link, Patch, Vendor Advisory
- http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037181.htmlBroken Link, Patch
- http://www.novell.com/support/viewContent.do?externalId=3426981Broken Link
- http://www.securityfocus.com/bid/31956Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1021117Broken Link, Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2008/2937Broken Link, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46138Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.