CVE-2005-2551: novell edirectory

EPSS trend

Probability

55.42%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 55.42% on 18-09-2026

18-09-202618-10-2026

EPSS score

55.42%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

exploit-databaseremotewindowsVerified
eDirectory 8.7.3 - iMonitor Remote Stack Buffer Overflow (Metasploit)
Maturity: weaponized
exploit-databaseremotewindowsVerified
Novell eDirectory 8.7.3 - iMonitor Remote Stack Overflow (Metasploit)
Maturity: weaponized
MetasploitremoteVerified
eDirectory 8.7.3 iMonitor Remote Stack Buffer Overflow
exploit/windows/http/edirectory_imonitor
Maturity: weaponized

References

6 links

secunia.com/advisories/16393Third Party AdvisoryX Refsource SECUNIA
support.novell.com/cgi-bin/search/searchtid.cgi?/2972038.htmX Refsource CONFIRMPatch
securitytracker.com/id?1014661VDB EntryX Refsource SECTRACK
www.securityfocus.com/bid/14548VDB EntryX Refsource BID
www.kb.cert.org/vuls/id/213165Third Party AdvisoryX Refsource CERT VNUS Government Resource
support.novell.com/cgi-bin/search/searchtid.cgi?/10098568.htmX Refsource CONFIRMPatchVendor Advisory

Related vulnerabilities

CVE-2016-9168novelledirectory1.47%9y ago23-03-2017 06:36A missing X-Frame-Options header in the NDS Utility Monitor in NDSD in Novell eDirectory before 9.0.2 could be used by remote attackers for clickjacking.CVE-2016-9167novelledirectory1.24%9y ago23-03-2017 06:36NDSD in Novell eDirectory before 9.0.2 did not calculate ACLs on LDAP objects across partition boundaries correctly, which could lead to a privilege escalation by modifying user attributes that would otherwise be filtered by an ACL.CVE-2016-5747novelledirectory1.94%9y ago23-03-2017 06:36A security vulnerability in cookie handling in the http stack implementation in NDSD in Novell eDirectory before 9.0.1 allows remote attackers to bypass intended access restrictions by leveraging predictable cookies.CVE-2008-1777novelledirectory2.31%18y ago14-04-2008 16:00The eDirectory Host Environment service (dhost.exe) in Novell eDirectory 8.8.2 allows remote attackers to cause a denial of service (CPU consumption) via a long HTTP HEAD request to TCP port 8028.CVE-2008-0925novelledirectory2.19%18y ago18-06-2008 19:29Cross-site scripting (XSS) vulnerability in the iMonitor interface in Novell eDirectory 8.7.3.x before 8.7.3 sp10, and 8.8.x before 8.8.2 ftf2, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters that are used within "error messages of the HTTP stack."CVE-2008-0926novelledirectory58.18%18y ago28-03-2008 18:00The SOAP interface to the eMBox module in Novell eDirectory 8.7.3.9 and earlier, and 8.8.x before 8.8.2, relies on client-side authentication, which allows remote attackers to bypass authentication via requests for /SOAP URIs, and cause a denial of service (daemon shutdown) or read arbitrary files. NOTE: it was later reported that 8.7.3.10 (aka 8.7.3 SP10) is also affected.

All vulnerabilities inedirectory

CVE-2005-2551: novell edirectory

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References