Unscored severity · published Dec 25, 2012
CVE-2012-0432
Stack-based buffer overflow in the Novell NCP implementation in NetIQ eDirectory 8.8.7.x before 8.8.7.2 allows remote attackers to have an unspecified impact via unknown vectors
–
CVSS
58.7%
EPSS
No
On KEV
Description
Stack-based buffer overflow in the Novell NCP implementation in NetIQ eDirectory 8.8.7.x before 8.8.7.2 allows remote attackers to have an unspecified impact via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)58.7% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ED
Edirectory · Microfocus
8.8.7.0; 8.8.7.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-0432
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-0432
www.novell.com
http://www.novell.com/support/kb/doc.php?id=3426981
bugzilla.novell.com
https://bugzilla.novell.com/show_bug.cgi?id=785272
More from Edirectory
9.8
CVE-2021-38132
Possible External service interaction Vulnerability
9.8
CVE-2017-9285
NetIQ eDirectory before 9.0 SP4 did not enforce login restrictions when "ebaclient" was used, allowing unpermitted access to eDirectory services
9.1
CVE-2021-22533
Possible Insertion of Sensitive Information into Log File Vulnerability
8.8
CVE-2017-7429
The certificate upload in NetIQ eDirectory PKI plugin before 8.8.8 Patch 10 Hotfix 1 could be abused to upload JSP code which could be used by authenticated attackers to execute…
7.5
CVE-2021-22532
Possible NLDAP Denial of Service attack Vulnerability