← back
CVE-2009-0192

CVE-2009-0192

EPSS 12.3%
Off-by-one error in the iMonitor component in Novell eDirectory 8.8 SP3, 8.8 SP3 FTF3, and possibly other versions allows remote attackers to execute arbitrary code via an HTTP request with a crafted Accept-Language header, which triggers a stack-based buffer overflow.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/8129unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://osvdb.org/55847http://secunia.com/advisories/34160http://secunia.com/secunia_research/2009-13/https://exchange.xforce.ibmcloud.com/vulnerabilities/51703http://www.novell.com/support/viewContent.do?externalId=3426981http://www.securityfocus.com/archive/1/504924/100/0/threadedhttp://www.securityfocus.com/bid/35666http://www.vupen.com/english/advisories/2009/1883