Unscored severity · published Apr 14, 2008
CVE-2008-0927
dhost.exe in Novell eDirectory 8.7.3 before sp10 and 8.8.2 allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with (1) multiple Connection…
–
CVSS
70%
EPSS
No
On KEV
Description
dhost.exe in Novell eDirectory 8.7.3 before sp10 and 8.8.2 allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with (1) multiple Connection headers or (2) a Connection header with multiple comma-separated values. NOTE: this might be similar to CVE-2008-1777.
Exploitation
Is it being used?
Exploit prediction (EPSS)70.0% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WI
Windows-nt · Microsoft
2000; 2003 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0927
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0927
Third Party Advisory
http://secunia.com/advisories/29805
Vendor Advisory
http://www.novell.com/support/viewContent.do?externalId=3829452&sliceId=1
Third Party Advisory
http://www.securityfocus.com/archive/1/491622/100/0/threaded
Third Party Advisory
http://www.securityfocus.com/bid/28757
Third Party Advisory
http://www.securitytracker.com/id?1019836
Third Party Advisory
http://www.vupen.com/english/advisories/2008/1217/references
More from Windows-nt
7.8
CVE-2004-0210
Microsoft Windows Privilege Escalation Vulnerability
7.8
CVE-2002-0367
Microsoft Windows Privilege Escalation Vulnerability
9.8
CVE-2002-0391
Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to…
9.8
CVE-2000-1218
The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS…
9.1
CVE-1999-0511
IP forwarding is enabled on a machine which is not a router or firewall