CVE-2009-4486
Stack-based buffer overflow in the eDirectory plugin in Novell iManager before 2.7.3 allows...
Stack-based buffer overflow in the eDirectory plugin in Novell iManager before 2.7.3 allows remote attackers to execute arbitrary code via vectors that trigger long arguments to an unspecified sub-application, related to importing and exporting from a schema.
Exploit likelihood
What each source reports
NVD Score used
Stack-based buffer overflow in the eDirectory plugin in Novell iManager before 2.7.3 allows remote attackers to execute arbitrary code via vectors that trigger long arguments to an unspecified sub-application, related to importing and exporting from a schema.
- Record
CVE-2009-4486- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Stack-based buffer overflow in the eDirectory plugin in Novell iManager before 2.7.3 allows remote attackers to execute arbitrary code via vectors that trigger long arguments to an unspecified sub-application, related to importing and exporting from a schema.
- Record
CVE-2009-4486- Updated
- 2026-11-02
EUVDEUVD-2009-4453 No score
Stack-based buffer overflow in the eDirectory plugin in Novell iManager before 2.7.3 allows remote attackers to execute arbitrary code via vectors that trigger long arguments to an unspecified sub-application, related to importing and exporting from a schema.
- Record
EUVD-2009-4453- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7vf7-7vgg-5pp8 No score
Stack-based buffer overflow in the eDirectory plugin in Novell iManager before 2.7.3 allows...
Stack-based buffer overflow in the eDirectory plugin in Novell iManager before 2.7.3 allows remote attackers to execute arbitrary code via vectors that trigger long arguments to an unspecified sub-application, related to importing and exporting from a schema.
- Record
GHSA-7vf7-7vgg-5pp8- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-4486 is a high vulnerability (CVSS 7.5) in Novell Imanager, published January 8, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.33%, the 91st percentile. No source names a fixed version.
References
secunia.com/advisories/38030
novell.com/support/viewContent.do?externalId=7004985&sliceId=1
osvdb.org/61584
exchange.xforce.ibmcloud.com/vulnerabilities/55468
securityfocus.com/bid/37672
vupen.com/english/advisories/2010/0074
zerodayinitiative.com/advisories/ZDI-10-001
nvd.nist.gov/vuln/detail/CVE-2009-4486
github.com/advisories/GHSA-7vf7-7vgg-5pp8