Sign inStart freeBook a demo

Edirectory vulnerabilitiesRanked by how likely they are to be used.

Product22 versions
The short answer

Edirectory is made by Novell. We track 52 published vulnerabilities in it, across 22 versions. None of them is on the list of flaws known to be exploited today. If you run Edirectory, keep it on a version the vendor still supports.

See the riskiest flaws

We keep watching the known-exploited list.

Known exploited

Which Edirectory vulnerabilities are being exploited?

This is the list that matters most: flaws criminals are using now.

None of Edirectory's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.

Exploit likelihood

Which Edirectory flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.

50% or more10% to 49%Under 10%
  1. 85%
    CVE-2006-5478High

    Multiple stack-based buffer overflows in Novell eDirectory 8.8.x before 8.8.1 FTF1, and 8.x up to 8.7.3.8, and Novell NetMail before 3.52e FTF2, allow remote attackers to execute arbitrary code via (1) a long HTTP...

    CVSS7.5Published24 Oct 2006
  2. 70%
    CVE-2008-0927Medium

    dhost.exe in Novell eDirectory 8.7.3 before sp10 and 8.8.2 allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with (1) multiple Connection headers or (2) a Connection header...

    CVSS5.0Published14 Apr 2008
  3. 58%
    CVE-2008-0926High

    The SOAP interface to the eMBox module in Novell eDirectory 8.7.3.9 and earlier, and 8.8.x before 8.8.2, relies on client-side authentication, which allows remote attackers to bypass authentication via requests for...

    CVSS7.5Published28 Mar 2008
  4. 55%
    CVE-2005-2551High

    Buffer overflow in dhost.exe in iMonitor for Novell eDirectory 8.7.3 on Windows allows attackers to cause a denial of service (crash) and obtain access to files via unknown vectors.

    CVSS7.5Published12 Aug 2005
  5. 51%
    CVE-2009-4655High

    The dhost web service in Novell eDirectory 8.8.5 uses a predictable session cookie, which makes it easier for remote attackers to hijack sessions via a modified cookie.

    CVSS7.5Published26 Feb 2010
  6. 13%
    CVE-2009-4653Critical

    Stack-based buffer overflow in the dhost module in Novell eDirectory 8.8 SP5 for Windows allows remote authenticated users to cause a denial of service (dhost.exe crash) and possibly execute arbitrary code via a long...

    CVSS9.0Published26 Feb 2010
  7. 12%
    CVE-2009-0192Medium

    Off-by-one error in the iMonitor component in Novell eDirectory 8.8 SP3, 8.8 SP3 FTF3, and possibly other versions allows remote attackers to execute arbitrary code via an HTTP request with a crafted Accept-Language...

    CVSS5.0Published14 Jul 2009
  8. 11%
    CVE-2008-4480Critical

    Heap-based buffer overflow in dhost.exe in Novell eDirectory 8.x before 8.8.3, and 8.7.3 before 8.7.3.10 ftf1, allows remote attackers to execute arbitrary code via a crafted Netware Core Protocol opcode 0x24 message...

    CVSS10.0Published14 Oct 2008
  9. 10%
    CVE-2004-0112Medium

    The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause...

    CVSS5.0Published23 Nov 2004
  10. 10%
    CVE-2008-4479Critical

    Heap-based buffer overflow in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.7.3 before 8.7.3.10 ftf1, allows remote attackers to execute arbitrary code via a SOAP request with a long Accept-Language header.

    CVSS10.0Published14 Oct 2008
Precursor Intelligence

Running Edirectory? We'll keep checking.

Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.

  1. Tell us what you runPick your software from a list, or let us work it out from your website.
  2. We match it to every flawOver 400,000 published flaws, checked against your list.
  3. Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
  4. Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Start free →Book a demo

Free plan, no card needed. Nothing to install.

FAQ

Common questions, answered plainly.

Something else? Talk to the team →

We track 52 published vulnerabilities listed under the name Edirectory, across 22 versions.

None of Edirectory's vulnerabilities is on the list of flaws known to be exploited today.

Create a Precursor Intelligence account and track Edirectory. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.

Keep exploring