Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Novell iManager 2.7 before SP6 Patch 1 allows remote attackers to hijack the authentication of arbitrary users by leveraging improper request validation by iManager code deployed within an Apache Tomcat container...

CVE-2013-1088

Cross-site request forgery CSRF vulnerability in Novell iManager 2.7 before SP6 Patch 1 allows remote attackers to hijack the authentication of arbitrary users by leveraging improper request validation by iManager code deployed within an Apache Tomcat container...

CVE-2013-3268

Novell iManager is affected: versions 2.7 prior to SP6 Patch 1 do not refresh the session token after logout, potentially enabling session-related abuse with remote access. Public references indicate multiple vulnerabilities for iManager

CVE-2013-1088

CVE-2013-1088 describes a CSRF vulnerability in Novell iManager 2.7 before SP6 Patch 1, where improper request validation inside the iManager code deployed in an Apache Tomcat container allows an attacker to hijack the authentication of arbitrary users. Affected component is iManager running on T...

CVE-2013-1088

Cross-site request forgery CSRF vulnerability in Novell iManager 2.7 before SP6 Patch 1 allows remote attackers to hijack the authentication of arbitrary users by leveraging improper request validation by iManager code deployed within an Apache Tomcat container...

CVE-2013-3268

Novell iManager 2.7 before SP6 Patch 1 does not refresh a token after a logout action, which has unspecified impact and remote attack vectors...

CVE-2013-1088: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Novell iManager 2.7 before SP6 Patch 1 allows remote attackers to hijack the authentication of arbitrary users by leveraging improper request validation by iManager code deployed within an Apache Tomcat container...

CVE-2013-3268: Improper Authentication

Novell iManager 2.7 before SP6 Patch 1 does not refresh a token after a logout action, which has unspecified impact and remote attack vectors...

Novell iManager Unsupported Version

The remote host is running a version of Novell iManager prior to version 2.7. Such versions are no longer covered under general or extended support. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security...

Novell iManager < 2.7.6 Patch 1 Multiple Vulnerabilities

The version of Novell iManager installed on the remote host is earlier than 2.7.6 Patch 1 and therefore affected by multiple vulnerabilities : - There is an unspecified cross-site request forgery vulnerability. CVE-2013-1088 - A flaw exists due to the software not properly terminating session...

Novell iManager Detection

Nessus was able to access the web interface of Novell iManager, a network administration tool. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid66034; scriptversion"1.4"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Novell iManager Detection";...

Novell iManager Create Attribute EnteredAttrName Buffer Overflow (CVE-2011-4188)

A buffer overflow vulnerability has been reported in the Novell iManager web application...

Novell iManager < 2.7.4 patch 4 Buffer Overflow Vulnerability

Novell iManager is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:netiq:imanager"; if...

Novell iManager jclient 'EnteredAttrName' Buffer Overflow Vulnerability

The host is running Novell iManager and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbnovellimanagerjclientbofvuln.nasl 5940 2017-04-12 09:02:05Z teissa $ Novell iManager jclient 'EnteredAttrName' Buffer Overflow Vulnerability Authors: Rachana Shetty Copyright:...

Novell iManager File Upload

File upload vulnerability in Novell iManager getMultiPartParameters Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

CVE-2011-4188

Buffer overflow in the Create Attribute function in jclient in Novell iManager 2.7.4 before patch 4 allows remote authenticated users to cause a denial of service application crash or possibly have unspecified other impact via a crafted EnteredAttrName parameter, a related issue to CVE-2010-1929...

Buffer overflow

Buffer overflow in the Create Attribute function in jclient in Novell iManager 2.7.4 before patch 4 allows remote authenticated users to cause a denial of service application crash or possibly have unspecified other impact via a crafted EnteredAttrName parameter, a related issue to CVE-2010-1929...

CVE-2011-4188

Buffer overflow in the Create Attribute function in jclient in Novell iManager 2.7.4 before patch 4 allows remote authenticated users to cause a denial of service application crash or possibly have unspecified other impact via a crafted EnteredAttrName parameter, a related issue to CVE-2010-1929...

CVE-2011-4188

CVE-2011-4188 affects Novell iManager 2.7.4 before patch 4. A buffer overflow in the Create Attribute function of jclient (EnteredAttrName handling) can be triggered by a crafted input, enabling remote authenticated users to cause a denial of service (application crash) and potentially other unsp...

CVE-2011-4188: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Create Attribute function in jclient in Novell iManager 2.7.4 before patch 4 allows remote authenticated users to cause a denial of service application crash or possibly have unspecified other impact via a crafted EnteredAttrName parameter, a related issue to CVE-2010-1929...