Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2009-2456 Details

Description

The DS\NDSD component in Novell eDirectory 8.8 before SP5 allows remote attackers to cause a denial of service (ndsd core dump) via an LDAP request containing multiple . (dot) wildcard characters in the Relative Distinguished Name (RDN).

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
http://osvdb.org/55848 CVE
http://secunia.com/advisories/34160 CVEVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/51705 CVE
http://www.novell.com/support/viewContent.do?externalId=3426981 CVE
http://www.securityfocus.com/bid/35666 CVE

see all 12 references

Weakness Enumeration

CWE-IDCWE NameSource
NVD-CWE-noinfoInsufficient Information to Classify Weakness[email protected]

Affected Products

ProductVersions
novell edirectory
8.8
8.8 sp1
8.8 sp2
8.8 sp3
8.8 sp4

CPE

  • cpe:2.3:a:novell:edirectory:8.8:*:*:*:*:*:*:*
  • cpe:2.3:a:novell:edirectory:8.8:sp1:*:*:*:*:*:*
  • cpe:2.3:a:novell:edirectory:8.8:sp2:*:*:*:*:*:*
  • cpe:2.3:a:novell:edirectory:8.8:sp3:*:*:*:*:*:*
  • cpe:2.3:a:novell:edirectory:8.8:sp4:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

6 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2009-2456
NVD Published Date:
Jul 14, 2009
NVD Last Modified:
Jun 16, 2026
Source:
[email protected]
CVE-2009-2456 Details - Not Deferred