Lucene search

K
cve[email protected]CVE-2011-4188
HistoryApr 09, 2012 - 8:55 p.m.

CVE-2011-4188

2012-04-0920:55:02
CWE-119
web.nvd.nist.gov
99
cve-2011-4188
novell imanager
buffer overflow
remote authenticated users
denial of service
application crash
nvd
security vulnerability

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

7.2 High

AI Score

Confidence

High

0.822 High

EPSS

Percentile

98.4%

Buffer overflow in the Create Attribute function in jclient in Novell iManager 2.7.4 before patch 4 allows remote authenticated users to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted EnteredAttrName parameter, a related issue to CVE-2010-1929.

Affected configurations

NVD
Node
novellimanagerRange2.7.4
OR
novellimanagerMatch1.5
OR
novellimanagerMatch2.0
OR
novellimanagerMatch2.0.2
OR
novellimanagerMatch2.5
OR
novellimanagerMatch2.6.0
OR
novellimanagerMatch2.7.0
OR
novellimanagerMatch2.7.3
OR
novellimanagerMatch2.7.3ftf4
OR
novellimanagerMatch2.7.3sp3

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

7.2 High

AI Score

Confidence

High

0.822 High

EPSS

Percentile

98.4%