CVE-2006-4517

CVE-2006-4517 affects Novell iManager 2.5 and 2.0.2, where a crafted HTTP POST containing a very long TREE parameter crashes the Tomcat server due to a NULL pointer dereference, causing a denial of service. The issue is triggered by improper handling of POST data in the iManager Tomcat component....

iDefense Security Advisory 10.31.06: Novell iManager Tomcat DoS Vulnerability

Novell iManager Tomcat DoS Vulnerability iDefense Security Advisory 10.31.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 31, 2006 I. BACKGROUND iManager is a management portal for Novell's eDirectory server. More information about iManager is available at the link shown...