Strix
26.1K

CVE-2008-0926

UnknownEPSS 58.18%

Last modified

CVE-2008-0926 is a vulnerability of currently unknown severity. The SOAP interface to the eMBox module in Novell eDirectory 8.7.3.9 and earlier, and 8.8.x before 8.8.2, relies on client-side authentication, which allows remote attackers to bypass authentication via requests for /SOAP URIs, and cause a denial of service (daemon shutdown) or read arbitrary files. NOTE: it was later reported that 8.7.3.10 (aka 8.7.3 SP10) is also affected.. EPSS estimates a 58.18% chance of exploitation in the next 30 days.

Description

The SOAP interface to the eMBox module in Novell eDirectory 8.7.3.9 and earlier, and 8.8.x before 8.8.2, relies on client-side authentication, which allows remote attackers to bypass authentication via requests for /SOAP URIs, and cause a denial of service (daemon shutdown) or read arbitrary files. NOTE: it was later reported that 8.7.3.10 (aka 8.7.3 SP10) is also affected.

Metrics

EPSS Probability
58.18%

99.0th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
NovellEdirectory<= 8.7.3.10
NovellEdirectory8.5
NovellEdirectory8.5.12a
NovellEdirectory8.5.27
NovellEdirectory8.6.2
NovellEdirectory8.7
NovellEdirectory8.7.1
NovellEdirectory8.7.3
NovellEdirectory8.7.3.8
NovellEdirectory8.7.3.8_presp9
NovellEdirectory8.7.3.9
NovellEdirectory8.8

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2008-0926?
The SOAP interface to the eMBox module in Novell eDirectory 8.7.3.9 and earlier, and 8.8.x before 8.8.2, relies on client-side authentication, which allows remote attackers to bypass authentication via requests for /SOAP URIs, and cause a denial of service (daemon shutdown) or read arbitrary files. NOTE: it was later reported that 8.7.3.10 (aka 8.7.3 SP10) is also affected.
How severe is CVE-2008-0926?
Severity scoring for CVE-2008-0926 is pending analysis. The EPSS model estimates a 58.18% probability of exploitation in the next 30 days.
How do I fix CVE-2008-0926?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2008

View all 2008CVEs →

Are you affected by CVE-2008-0926?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST