CVE-2008-5091: Novell Edirectory

High severity, CVSS 10.0. EPSS: 2.1% chance of exploitation in the next 30 days.

Buffer overflow in the LDAP Service in Novell eDirectory 8.7.3 before SP10a and 8.8 before SP3 allows attackers to cause a denial of service (application crash) via vectors involving an "invalid extensibleMatch filter."

Affected products

• Novell Edirectory: up to and including 8.8; version 8.0 only; version 8.5 only; version 8.5.12a only; version 8.5.27 only; version 8.6.2 only; …

Published 2008-11-14. Last modified 2026-06-16.