EUVD-2010-0315

Malware in sbrugna...

Novell iManager getMultiPartParameters Arbitrary File Upload

This module exploits a directory traversal vulnerability which allows remote attackers to upload and execute arbitrary code. PortalModuleInstallManager This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

Novell Access Manager Arbitrary File Upload Remote Code Execution Vulnerability

This vulnerability allows remote attackers to upload arbitrary files on vulnerable installations of Novell Access Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the PortalModuleInstallManager component of the Novell Management Console which...

CVE-2010-0284

Directory traversal vulnerability in the getEntry method in the PortalModuleInstallManager component in a servlet in nps.jar in the Administration Console aka Access Management Console in Novell Access Manager 3.1 before 3.1.2-281 on Windows allows remote attackers to create arbitrary files with...