CVE-2008-0927: dhost.exe in Novell eDirectory 8.7.3 before sp10 and 8.8.2 allows remote attackers to cause a denial of ser...

Security readout for executives and security teams

CVE-2008-0927 is a remote denial-of-service issue in Novell eDirectory's dhost.exe. A specially formed HTTP request can drive CPU consumption, potentially disrupting directory services that organizations rely on for authentication and identity operations. Exposure is most likely where legacy Novell eDirectory HTTP services are reachable by untrusted networks. Internet-facing or broadly internal management interfaces increase business risk because directory-service availability can affect login, application access, and identity-dependent workflows. Treat this as a legacy availability risk. It is not described as data theft or code execution, but disruption to directory services can interrupt authentication and business access. Prioritize systems that are internet-facing or support critical identity workflows. Mitigation focus: Inventory Novell eDirectory versions and identify 8.7.3 before SP10 or 8.8.2 systems.; Apply Novell-supported maintenance or security updates for affected eDirectory deployments.; Restrict eDirectory HTTP service exposure to trusted administrative networks..

Prepared

Jun 28, 2026, 19:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.