CVE-2008-0924

CVE-2008-0924 describes a stack-based buffer overflow vulnerability in the DoLBURPRequest function of libnldap within Novell eDirectory versions 8.7.3.9 and earlier, and 8.8.1 and earlier. This flaw allows remote attackers to trigger a denial of service (daemon crash or CPU consumption) or execute arbitrary code by sending a crafted, long delRequest LDAP Extended Request message, likely involving an extended Distinguished Name (DN) field. The vulnerability has a CVSS score of 6.8 (Medium), indicating a network-based attack with medium complexity, requiring no authentication, and potentially leading to partial confidentiality, integrity, and availability impacts. While the EPSS score is low, suggesting a low probability of exploitation, the FAUCET Risk Score is 50/100. There is no evidence of active exploitation (KEV: No, Hot List: Inactive), nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Furthermore, the vulnerability has received minimal community discussion and media coverage, suggesting it is not a widely discussed or exploited threat.