Critical severity9.8NVD Advisory· Published Nov 12, 2008· Updated Apr 23, 2026
CVE-2008-5038
CVE-2008-5038
Description
Use-after-free vulnerability in the NetWare Core Protocol (NCP) feature in Novell eDirectory 8.7.3 SP10 before 8.7.3 SP10 FTF1 and 8.8 SP2 for Windows allows remote attackers to cause a denial of service and possibly execute arbitrary code via a sequence of "Get NCP Extension Information By Name" requests that cause one thread to operate on memory after it has been freed in another thread, which triggers memory corruption, aka Novell Bug 373852.
Affected products
11cpe:2.3:a:novell:edirectory:*:*:*:*:*:*:*:*+ 10 more
- cpe:2.3:a:novell:edirectory:*:*:*:*:*:*:*:*range: <8.7.3
- cpe:2.3:a:novell:edirectory:8.7.3:sp1:*:*:*:windows:*:*
- cpe:2.3:a:novell:edirectory:8.7.3:sp2:*:*:*:windows:*:*
- cpe:2.3:a:novell:edirectory:8.7.3:sp3:*:*:*:windows:*:*
- cpe:2.3:a:novell:edirectory:8.7.3:sp4:*:*:*:windows:*:*
- cpe:2.3:a:novell:edirectory:8.7.3:sp5:*:*:*:windows:*:*
- cpe:2.3:a:novell:edirectory:8.7.3:sp6:*:*:*:windows:*:*
- cpe:2.3:a:novell:edirectory:8.7.3:sp7:*:*:*:windows:*:*
- cpe:2.3:a:novell:edirectory:8.7.3:sp8:*:*:*:windows:*:*
- cpe:2.3:a:novell:edirectory:8.7.3:sp9:*:*:*:windows:*:*
- cpe:2.3:a:novell:edirectory:8.8:-:*:*:*:windows:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
10- support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037180.htmlnvdBroken LinkPatchVendor Advisory
- support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037181.htmlnvdBroken LinkPatch
- secunia.com/advisories/32395nvdBroken LinkVendor Advisory
- www.securityfocus.com/bid/31956nvdBroken LinkThird Party AdvisoryVDB Entry
- www.securitytracker.com/idnvdBroken LinkThird Party AdvisoryVDB Entry
- www.vupen.com/english/advisories/2008/2937nvdBroken LinkVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/46138nvdThird Party AdvisoryVDB Entry
- labs.idefense.com/intelligence/vulnerabilities/display.phpnvdBroken Link
- osvdb.org/48206nvdBroken Link
- www.novell.com/support/viewContent.donvdBroken Link
News mentions
0No linked articles in our index yet.