CVE-2009-0895

CVE-2009-0895 is a critical-severity vulnerability in Novell Edirectory with a CVSS 2.0 base score of 10.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-189.

Key facts

• Severity: Critical (CVSS 2.0 base score 10.0)
• EPSS exploit prediction: 7% (93rd percentile)
• Actively exploited: Not listed in CISA KEV
• Weakness: CWE-189
• Affected product: Novell Edirectory
• Published: 2009-12-03
• Last modified: 2026-06-16

Description

Integer overflow in Novell eDirectory 8.7.3.x before 8.7.3.10 ftf2 and 8.8.x before 8.8.5.2 allows remote attackers to execute arbitrary code via an NDS Verb 0x1 request containing a large integer value that triggers a heap-based buffer overflow.

Frequently asked questions

What is CVE-2009-0895?

Integer overflow in Novell eDirectory 8.7.3.x before 8.7.3.10 ftf2 and 8.8.x before 8.8.5.2 allows remote attackers to execute arbitrary code via an NDS Verb 0x1 request containing a large integer value that triggers a heap-based buffer overflow.

How severe is CVE-2009-0895?

CVE-2009-0895 has a CVSS 2.0 base score of 10.0, rated critical severity.

Is CVE-2009-0895 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 7% (93rd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2009-0895?

CVE-2009-0895 primarily affects Novell Edirectory. In total, 22 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2009-0895?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

When was CVE-2009-0895 published?

CVE-2009-0895 was published on 2009-12-03 and last updated on 2026-06-16.

References

• http://secunia.com/advisories/37554
• http://www.iss.net/threats/356.html
• http://www.novell.com/support/viewContent.do?externalId=7004912
• http://www.securityfocus.com/bid/37184
• http://www.vupen.com/english/advisories/2009/3379
• https://bugzilla.novell.com/show_bug.cgi?id=524344
• https://bugzilla.novell.com/show_bug.cgi?id=545887
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50616

Affected products (22)

• cpe:2.3:a:novell:edirectory:8.7.3:*:*:*:*:*:*:*
• cpe:2.3:a:novell:edirectory:8.7.3:sp10:*:*:*:*:*:*
• cpe:2.3:a:novell:edirectory:8.7.3:sp10:ftf1:*:*:*:*:*
• cpe:2.3:a:novell:edirectory:8.7.3:sp10_b:*:*:*:*:*:*
• cpe:2.3:a:novell:edirectory:8.7.3:sp3:*:*:*:*:*:*
• cpe:2.3:a:novell:edirectory:8.7.3:sp3:ftf1:*:*:*:*:*
• cpe:2.3:a:novell:edirectory:8.7.3:sp4:*:*:*:*:*:*
• cpe:2.3:a:novell:edirectory:8.7.3:sp4:ftf1:*:*:*:*:*
• cpe:2.3:a:novell:edirectory:8.7.3:sp5:*:*:*:*:*:*
• cpe:2.3:a:novell:edirectory:8.7.3:sp5:ftf1:*:*:*:*:*
• cpe:2.3:a:novell:edirectory:8.7.3.8:*:*:*:*:*:*:*
• cpe:2.3:a:novell:edirectory:8.7.3.9:*:*:*:*:*:*:*
• cpe:2.3:a:novell:edirectory:8.7.3.10:*:*:*:*:*:*:*
• cpe:2.3:a:novell:edirectory:8.8:*:*:*:*:*:*:*
• cpe:2.3:a:novell:edirectory:8.8:sp1:*:*:*:*:*:*
• cpe:2.3:a:novell:edirectory:8.8:sp2:*:*:*:*:*:*
• cpe:2.3:a:novell:edirectory:8.8:sp3:ftf3:*:*:*:*:*
• cpe:2.3:a:novell:edirectory:8.8:sp4:*:*:*:*:*:*
• cpe:2.3:a:novell:edirectory:8.8.1:*:*:*:*:*:*:*
• cpe:2.3:a:novell:edirectory:8.8.2:*:*:*:*:*:*:*
• cpe:2.3:a:novell:edirectory:8.8.2:*:ftf1:*:*:*:*:*
• cpe:2.3:a:novell:edirectory:8.8.5:*:ftf1:*:*:*:*:*

More vulnerabilities in Novell Edirectory

• CVE-2008-5094 — Critical (CVSS 10.0): Heap-based buffer overflow in the NDS Service in Novell eDirectory before 8.8 SP3 has unknown impact and attack vectors.
• CVE-2008-5092 — Critical (CVSS 10.0): Heap-based buffer overflows in Novell eDirectory HTTP protocol stack (HTTPSTK) before 8.8 SP3 have unknown impact and…
• CVE-2008-5091 — Critical (CVSS 10.0): Buffer overflow in the LDAP Service in Novell eDirectory 8.7.3 before SP10a and 8.8 before SP3 allows attackers to…
• CVE-2008-4480 — Critical (CVSS 10.0): Heap-based buffer overflow in dhost.exe in Novell eDirectory 8.x before 8.8.3, and 8.7.3 before 8.7.3.10 ftf1, allows…
• CVE-2008-4479 — Critical (CVSS 10.0): Heap-based buffer overflow in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.7.3 before 8.7.3.10 ftf1, allows…
• CVE-2008-4478 — Critical (CVSS 10.0): Multiple integer overflows in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.73 before 8.7.3.10 ftf1, allow…

All CVEs affecting Novell Edirectory →

Other CWE-189 (Numeric Errors) vulnerabilities

• CVE-2015-8396 — Critical (CVSS 10.0): Integer overflow in the ImageRegionReader::ReadIntoBuffer function in…
• CVE-2015-7205 — Critical (CVSS 10.0): Integer underflow in the RTPReceiverVideo::ParseRtpPacket function in Mozilla Firefox before 43.0 and Firefox ESR 38.x…
• CVE-2015-6575 — Critical (CVSS 10.0): SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly consider integer promotion, which…
• CVE-2015-3864 — Critical (CVSS 10.0): Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in…
• CVE-2015-3836 — Critical (CVSS 10.0): The Parse_wave function in arm-wt-22k/lib_src/eas_mdls.c in the Sonivox DLS-to-EAS converter in Android before 5.1.1…
• CVE-2015-3834 — Critical (CVSS 10.0): Multiple integer overflows in the BnHDCP::onTransact function in media/libmedia/IHDCP.cpp in libstagefright in Android…

Browse all CWE-189 (Numeric Errors) vulnerabilities →