CVE-2012-0429
UnknownEPSS 1.88%
Last modified
CVE-2012-0429 is a vulnerability of currently unknown severity. dhost in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 on Windows allows remote authenticated users to cause a denial of service (daemon crash) via crafted characters in an HTTP request.. EPSS estimates a 1.88% chance of exploitation in the next 30 days.
Description
dhost in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 on Windows allows remote authenticated users to cause a denial of service (daemon crash) via crafted characters in an HTTP request.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Microfocus | Edirectory | 8.8.6.0 |
| Microfocus | Edirectory | 8.8.6.1 |
| Microfocus | Edirectory | 8.8.6.2 |
| Microfocus | Edirectory | 8.8.6.3 |
| Microfocus | Edirectory | 8.8.6.4 |
| Microfocus | Edirectory | 8.8.6.5 |
| Microfocus | Edirectory | 8.8.6.6 |
| Microfocus | Edirectory | 8.8.7.0 |
| Microfocus | Edirectory | 8.8.7.1 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2012-0429?
dhost in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 on Windows allows remote authenticated users to cause a denial of service (daemon crash) via crafted characters in an HTTP request.
How severe is CVE-2012-0429?
Severity scoring for CVE-2012-0429 is pending analysis. The EPSS model estimates a 1.88% probability of exploitation in the next 30 days.
How do I fix CVE-2012-0429?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2012
- CVE-2012-0420zypp-refresh-wrapper in SUSE Zypper before 1.3.20 and 1.6.x …
- CVE-2012-0421The SUSE Audit Log Keeper daemon before 0.2.1-0.4.6.1 for SU…
- CVE-2012-0425LanItems.ycp in save_y2logs in yast2-network before 2.24.4 i…
- CVE-2012-0426Race condition in sap_suse_cluster_connector before 1.0.0-0.…
- CVE-2012-0427yast2-add-on-creator in SUSE inst-source-utils 2008.11.26 be…
- CVE-2012-0428Cross-site scripting (XSS) vulnerability in NetIQ eDirectory…
- CVE-2012-0430Unspecified vulnerability in NetIQ eDirectory 8.8.6.x before…
- CVE-2012-0432Stack-based buffer overflow in the Novell NCP implementation…
- CVE-2012-0433The install-chef-suse.sh script shipped with crowbar before …3.3
- CVE-2012-0434The server in Crowbar, as used in SUSE Cloud 1.0, uses weak …
- CVE-2012-0435SUSE WebYaST before 1.2 0.2.63-0.6.1 allows remote attackers…
- CVE-2012-0439An ActiveX control in gwcls1.dll in the client in Novell Gro…
Are you affected by CVE-2012-0429?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST