← Database

CVE-2009-4654

CRITICAL CVSS: 9.0 Published: 2010-02-26 Modified: 2026-06-16

Description

Stack-based buffer overflow in the dhost module in Novell eDirectory 8.8 SP5 for Windows allows remote authenticated users to execute arbitrary code via long sadminpwd and verifypwd parameters in a submit action to /dhost/httpstk.

Affected Platforms

Microsoft WindowsNovell Edirectory

Weakness Type

CWE-119

References