← Database

CVE-2009-0895

CRITICAL CVSS: 10.0 Published: 2009-12-03 Modified: 2026-06-16

Description

Integer overflow in Novell eDirectory 8.7.3.x before 8.7.3.10 ftf2 and 8.8.x before 8.8.5.2 allows remote attackers to execute arbitrary code via an NDS Verb 0x1 request containing a large integer value that triggers a heap-based buffer overflow.

Affected Platforms

Novell Edirectory

Weakness Type

CWE-189

References