CVE-2008-0926

CVE-2008-0926 describes an authentication bypass vulnerability in the SOAP interface of the eMBox module within Novell eDirectory versions 8.7.3.9 and earlier, and 8.8.x prior to 8.8.2 (including 8.7.3.10). This flaw allows unauthenticated remote attackers to access /SOAP URIs, leading to potential denial of service (daemon shutdown) or arbitrary file reading. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for significant impact on confidentiality, integrity, and availability. While not listed in CISA KEV, exploit modules exist in Metasploit and ExploitDB, indicating readily available exploit code, though there is no evidence of active exploitation or significant community discussion.