CVE-2008-3159
Last modified
CVE-2008-3159 is a vulnerability of currently unknown severity. Integer overflow in ds.dlm, as used by dhost.exe, in Novell eDirectory 8.7.3.10 before 8.7.3 SP10b and 8.8 before 8.8.2 ftf2 allows remote attackers to execute arbitrary code via unspecified vectors that trigger a stack-based buffer overflow, related to "flawed arithmetic.". EPSS estimates a 8.67% chance of exploitation in the next 30 days.
Description
Integer overflow in ds.dlm, as used by dhost.exe, in Novell eDirectory 8.7.3.10 before 8.7.3 SP10b and 8.8 before 8.8.2 ftf2 allows remote attackers to execute arbitrary code via unspecified vectors that trigger a stack-based buffer overflow, related to "flawed arithmetic."
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Novell | Edirectory | 8.7.3 |
| Novell | Edirectory | 8.8 |
References
- http://secunia.com/advisories/30938Vendor Advisory
- http://secunia.com/advisories/30938Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-3159?
How severe is CVE-2008-3159?
How do I fix CVE-2008-3159?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-3153SQL injection vulnerability in Triton CMS Pro allows remote …
- CVE-2008-3154SQL injection vulnerability in index.php in WebBlizzard CMS …
- CVE-2008-3155Stack-based buffer overflow in the ActiveX control (as2guiie…
- CVE-2008-3156The ActiveScan ActiveX Control (as2guiie.dll) in Panda Activ…
- CVE-2008-3157Nortel SIP Multimedia PC Client 4.x MCS5100 and MCS5200 does…
- CVE-2008-3158Unspecified vulnerability in NWFS.SYS in Novell Client for W…
- CVE-2008-3160Multiple unspecified vulnerabilities in IBM Data ONTAP 7.1 b…
- CVE-2008-3161Multiple cross-site scripting (XSS) vulnerabilities in jsp/c…
- CVE-2008-3162Stack-based buffer overflow in the str_read_packet function …
- CVE-2008-3163Directory traversal vulnerability in dodosmail.php in DodosM…
- CVE-2008-3164Directory traversal vulnerability in blog.php in fuzzylime (…
- CVE-2008-3165Directory traversal vulnerability in rss.php in fuzzylime (c…
Are you affected by CVE-2008-3159?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST