Heap-based buffer overflows in Novell eDirectory HTTP protocol stack (HTTPSTK) before 8.8 SP3 have unknown impact and attack vectors related to the (1) HTTP language header and (2) HTTP content-length header.

More... (http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-5092)