CVE-2008-0927 CVE-2008-0927

漏洞描述

dhost.exe in Novell eDirectory 8.7.3 before sp10 and 8.8.2 allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with (1) multiple Connection headers or (2) a Connection header with multiple comma-separated values. NOTE: this might be similar to CVE-2008-1777.

影响产品

微软公司Windows-NT-Server查看产品 →

修复建议

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

参考链接

exchange.xforce.ibmcloud.comhttps://exchange.xforce.ibmcloud.com/vulnerabilities/41787↗www.novell.comhttp://www.novell.com/support/viewContent.do?externalId=3829452&sliceId=1↗www.vupen.comhttp://www.vupen.com/english/advisories/2008/1217/references↗www.securitytracker.comhttp://www.securitytracker.com/id?1019836↗www.securityfocus.comhttp://www.securityfocus.com/archive/1/491622/100/0/threaded↗www.securityfocus.comhttp://www.securityfocus.com/bid/28757↗secunia.comhttp://secunia.com/advisories/29805↗

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
remote_registry_access_check Remote Registry Service Disabled Check Microsoft-Windows-Business-Server Windows Server Windows+14	中危	—	—	PoCEXP	2025/08/01
hard_disk_default_share Hard Disk Default Share Removal Check Microsoft-Windows-Business-Server IIS Windows Server+8	中危	—	—	PoCEXP	2025/08/01
CVE-2018-3991RCE CVE-2018-3991 Windows Server Windows Windows7+10	严重	9.8	71.1%	PoCEXP	2019/02/05
CVE-2018-4990RCE CVE-2018-4990 Microsoft-Windows-Business-Server Windows Server Windows+14	高危	8.8	60.1%	PoCEXP	2018/07/09
CVE-2016-4228 CVE-2016-4228 Windows Windows7 Windows-Server-2003+10	高危	8.8	73.7%	PoCEXP	2016/07/13
CVE-2016-1019RCE CVE-2016-1019 Windows Windows7 WindowsXP+6	严重	9.8	80.9%	PoCEXP	2016/04/07

利用情报状态

漏洞描述

影响产品

修复建议

参考链接

同产品关联漏洞