Critical severity9.8NVD Advisory· Published Nov 12, 2008· Updated Jun 16, 2026
CVE-2008-5038
CVE-2008-5038
Description
Use-after-free vulnerability in the NetWare Core Protocol (NCP) feature in Novell eDirectory 8.7.3 SP10 before 8.7.3 SP10 FTF1 and 8.8 SP2 for Windows allows remote attackers to cause a denial of service and possibly execute arbitrary code via a sequence of "Get NCP Extension Information By Name" requests that cause one thread to operate on memory after it has been freed in another thread, which triggers memory corruption, aka Novell Bug 373852.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
12cpe:2.3:a:novell:edirectory:*:*:*:*:*:*:*:*+ 11 more
- cpe:2.3:a:novell:edirectory:*:*:*:*:*:*:*:*range: <8.7.3
- cpe:2.3:a:novell:edirectory:8.7.3:sp1:*:*:*:windows:*:*
- cpe:2.3:a:novell:edirectory:8.7.3:sp2:*:*:*:windows:*:*
- cpe:2.3:a:novell:edirectory:8.7.3:sp3:*:*:*:windows:*:*
- cpe:2.3:a:novell:edirectory:8.7.3:sp4:*:*:*:windows:*:*
- cpe:2.3:a:novell:edirectory:8.7.3:sp5:*:*:*:windows:*:*
- cpe:2.3:a:novell:edirectory:8.7.3:sp6:*:*:*:windows:*:*
- cpe:2.3:a:novell:edirectory:8.7.3:sp7:*:*:*:windows:*:*
- cpe:2.3:a:novell:edirectory:8.7.3:sp8:*:*:*:windows:*:*
- cpe:2.3:a:novell:edirectory:8.7.3:sp9:*:*:*:windows:*:*
- cpe:2.3:a:novell:edirectory:8.8:-:*:*:*:windows:*:*
- (no CPE)range: <8.7.3 SP10 FTF1 and 8.8 SP2
Patches
Vulnerability mechanics
References
10- support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037180.htmlnvdBroken LinkPatchVendor Advisory
- support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037181.htmlnvdBroken LinkPatch
- secunia.com/advisories/32395nvdBroken LinkVendor Advisory
- www.securityfocus.com/bid/31956nvdBroken LinkThird Party AdvisoryVDB Entry
- www.securitytracker.com/idnvdBroken LinkThird Party AdvisoryVDB Entry
- www.vupen.com/english/advisories/2008/2937nvdBroken LinkVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/46138nvdThird Party AdvisoryVDB Entry
- labs.idefense.com/intelligence/vulnerabilities/display.phpnvdBroken Link
- osvdb.org/48206nvdBroken Link
- www.novell.com/support/viewContent.donvdBroken Link
News mentions
0No linked articles in our index yet.