CVE-2009-4486

Stack-based buffer overflow in the eDirectory plugin in Novell iManager before 2.7.3 allows remote attackers to execute arbitrary code via vectors that trigger long arguments to an unspecified sub-application, related to importing and exporting from a schema...

CVE-2009-4486

CVE-2009-4486 involves a stack-based buffer overflow in the Novell iManager eDirectory plugin that handles importing/exporting schema data. The root cause is inadequate validation of user-supplied arguments in a sub-application, allowing remote attackers to trigger a long input path and execute a...

Novell iManager eDirectory plugin buffer overflow

Buffer overflow on schema parsing...

CVE-2009-4486: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the eDirectory plugin in Novell iManager before 2.7.3 allows remote attackers to execute arbitrary code via vectors that trigger long arguments to an unspecified sub-application, related to importing and exporting from a schema...

ZDI-10-001: Novell iManager eDirectory Plugin Remote Code Execution Vulnerability

ZDI-10-001: Novell iManager eDirectory Plugin Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-001 January 7, 2010 -- CVE ID: CVE-2009-4486 -- Affected Vendors: Novell -- Affected Products: Novell iManager -- Vulnerability Details: This vulnerability allows...

Novell iManager eDirectory Plugin Remote Code Execution Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Novell iManager. Authentication is not required to exploit this vulnerability. The flaw exists in an application called by the iManager in order to handle importing/exporting of schema information. While...

Novell iManager Tomcat HTTP POST Request Handling Denial of Service (CVE-2006-4517)

Novell iManager is a web-based administration console that provides management of many other Novell products. During installation, if the Windows Web Publishing Services IIS is not available, the installation program will install the Apache HTTP server. The iManager service itself is a Java web...

Novell iManager < 2.7 SP1 Property Book Pages Arbitrary Plug-in Studio Deletion

Novell iManager is installed on the remote host. The version of iManager installed reportedly fails to implement sufficient access control checks on 'Property Book Pages' created with Plug-in Studio before granting delete privileges on them to a user. %NASLMINLEVEL 70300 C Tenable Network Securit...

CVE-2008-3488

Unspecified vulnerability in Novell iManager before 2.7 SP1 2.7.1 allows remote attackers to delete Plug-in Studio created Property Book Pages via unknown vectors...

Code injection

Unspecified vulnerability in Novell iManager before 2.7 SP1 2.7.1 allows remote attackers to delete Plug-in Studio created Property Book Pages via unknown vectors...

CVE-2008-3488

Unspecified vulnerability in Novell iManager before 2.7 SP1 2.7.1 allows remote attackers to delete Plug-in Studio created Property Book Pages via unknown vectors...

CVE-2008-3488

CVE-2008-3488 affects Novell iManager prior to 2.7 SP1 (2.7.1). An unspecified remote vulnerability allows an attacker to delete Property Book Pages created with Plug-in Studio. Impact is unauthorized deletion of those pages; exploitation details are not disclosed in the provided documents. Remed...

Novell iManager < 2.7 SP1 Property Book Pages Security Bypass

Binary data 4618.prm...

Novell iManager Version Detection

Binary data 4616.prm...

CVE-2008-3488: Undefined Security Weakness

Unspecified vulnerability in Novell iManager before 2.7 SP1 2.7.1 allows remote attackers to delete Plug-in Studio created Property Book Pages via unknown vectors...

CVE-2005-1730

Multiple vulnerabilities in the OpenSSL ASN.1 parser, as used in Novell iManager 2.0.2, allows remote attackers to cause a denial of service NULL pointer dereference via crafted packets, as demonstrated by "OpenSSL ASN.1 brute forcer." NOTE: this issue might overlap CVE-2004-0079, CVE-2004-0081, ...

CVE-2005-1730: Undefined Security Weakness

Multiple vulnerabilities in the OpenSSL ASN.1 parser, as used in Novell iManager 2.0.2, allows remote attackers to cause a denial of service NULL pointer dereference via crafted packets, as demonstrated by "OpenSSL ASN.1 brute forcer." NOTE: this issue might overlap CVE-2004-0079, CVE-2004-0081, ...

CVE-2006-4517

Novell iManager 2.5 and 2.0.2 allows remote attackers to cause a denial of service crash in the Tomcat server via a long TREE parameter in an HTTP POST, which triggers a NULL pointer dereference...

CVE-2006-4517

CVE-2006-4517 affects Novell iManager 2.5 and 2.0.2, where a crafted HTTP POST containing a very long TREE parameter crashes the Tomcat server due to a NULL pointer dereference, causing a denial of service. The issue is triggered by improper handling of POST data in the iManager Tomcat component....

CVE-2006-4517

Novell iManager 2.5 and 2.0.2 allows remote attackers to cause a denial of service crash in the Tomcat server via a long TREE parameter in an HTTP POST, which triggers a NULL pointer dereference...