CVE ID:	CVE-2009-0192
Description:	Off-by-one error in the iMonitor component in Novell eDirectory 8.8 SP3, 8.8 SP3 FTF3, and possibly other versions allows remote attackers to execute arbitrary code via an HTTP request with a crafted Accept-Language header, which triggers a stack-based buffer overflow.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0192 Bugtraq: 20090714 Secunia Research: Novell eDirectory iMonitor "Accept-Language" Buffer Overflow (Google Search) http://www.securityfocus.com/archive/1/archive/1/504924/100/0/threaded http://secunia.com/secunia_research/2009-13/ BugTraq ID: 35666 http://www.securityfocus.com/bid/35666 http://osvdb.org/55847 http://secunia.com/advisories/34160 http://www.vupen.com/english/advisories/2009/1883 XForce ISS Database: edirectory-imonitor-acceptlanguage-bo(51703) http://xforce.iss.net/xforce/xfdb/51703

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: