CVE-2009-4654: Novell Edirectory

High severity, CVSS 9.0. EPSS: 6.7% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the dhost module in Novell eDirectory 8.8 SP5 for Windows allows remote authenticated users to execute arbitrary code via long sadminpwd and verifypwd parameters in a submit action to /dhost/httpstk.

Affected products

• Novell Edirectory: version 8.8 only

Published 2010-02-26. Last modified 2026-06-16.