CVE-2009-0895: Novell Edirectory

High severity, CVSS 10.0. EPSS: 6.8% chance of exploitation in the next 30 days.

Integer overflow in Novell eDirectory 8.7.3.x before 8.7.3.10 ftf2 and 8.8.x before 8.8.5.2 allows remote attackers to execute arbitrary code via an NDS Verb 0x1 request containing a large integer value that triggers a heap-based buffer overflow.

Affected products

• Novell Edirectory: version 8.7.3 only; version 8.7.3.8 only; version 8.7.3.9 only; version 8.7.3.10 only; version 8.8 only; version 8.8.1 only; …

Published 2009-12-03. Last modified 2026-06-16.