iDefense Security Advisory 10.31.06: Novell iManager Tomcat DoS Vulnerability

Novell iManager Tomcat DoS Vulnerability iDefense Security Advisory 10.31.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 31, 2006 I. BACKGROUND iManager is a management portal for Novell's eDirectory server. More information about iManager is available at the link shown...

Novell iManager DoS

Oversized TREE parameter of HTTP POST request causes NULL pointer dereference...

CVE-2006-4517: Undefined Security Weakness

Novell iManager 2.5 and 2.0.2 allows remote attackers to cause a denial of service crash in the Tomcat server via a long TREE parameter in an HTTP POST, which triggers a NULL pointer dereference...

CVE-2006-4186

The iManager in eMBoxClient.jar in Novell eDirectory 8.7.3.8 writes passwords in plaintext to a log file, which allows local users to obtain passwords by reading the file...

CVE-2006-4186

The CVE-2006-4186 entry pertains to Novell eDirectory 8.7.3.8 where the iManager in eMBoxClient.jar writes passwords in plaintext to a log file. This creates a local information disclosure risk: local users can read the log file to obtain passwords. The affected component is the iManager inside e...

CVE-2005-1730

Multiple vulnerabilities in the OpenSSL ASN.1 parser, as used in Novell iManager 2.0.2, allows remote attackers to cause a denial of service NULL pointer dereference via crafted packets, as demonstrated by "OpenSSL ASN.1 brute forcer." NOTE: this issue might overlap CVE-2004-0079, CVE-2004-0081, ...

[Full-disclosure] [CIRT.DK - Advisory] Novell iManager 2.0.2 ASN.1 Parsing vulnerability in Apache module

ID: NOVL102200 Domain: primus Solution Class: Novell Fact: Novell iManager 2.02 Fact: Apache 2.0.48 Fact: OpenSSL 0.9.7 Symptom: OpenSSL ASN.1 Parsing vulnerability in Apache Symptom: Server stops responding and an error occurs Cause: Multiple vulnerabilities were reported in the ASN.1 parsing co...

CVE-2002-1002

CVE-2002-1002 describes a buffer overflow in Novell iManager (eMFrame 1.2.1) that enables remote attackers to cause a denial of service (crash) by supplying a long user name. Affected software: Novell iManager with component eMFrame 1.2.1. Root cause: improper handling of long user name input lea...

CVE-2002-1002

Buffer overflow in Novell iManager eMFrame 1.2.1 allows remote attackers to cause a denial of service crash via a long user name...

CVE-2002-1002: Undefined Security Weakness

Buffer overflow in Novell iManager eMFrame 1.2.1 allows remote attackers to cause a denial of service crash via a long user name...

CVE-2002-1283

Buffer overflow in Novell iManager eMFrame before 1.5 allows remote attackers to cause a denial of service via an authentication request with a long Distinguished Name DN attribute...

CVE-2002-1283

CVE-2002-1283 affects Novell iManager (eMFrame) prior to 1.5. The vulnerability is a buffer overflow in the authentication path triggered by a long Distinguished Name (DN) attribute in a remote request, allowing an unauthenticated attacker over the network to cause a denial of service. Root cause...

CVE-2002-1283

Buffer overflow in Novell iManager eMFrame before 1.5 allows remote attackers to cause a denial of service via an authentication request with a long Distinguished Name DN attribute...

CVE-2002-1283: Undefined Security Weakness

Buffer overflow in Novell iManager eMFrame before 1.5 allows remote attackers to cause a denial of service via an authentication request with a long Distinguished Name DN attribute...

NOVL-2002-2963651 - iManager (eMFrame) Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 For Immediate Disclosure ============================== Summary ============================== Security Alert: NOVL-2002-2963651 Title: iManager eMFrame Buffer Overflow Date: 08-Oct-2002 Revision: Updates NOVL-2002-2963081 Product Name: iManager eMFra...

Buffer overflow in Novell IManager

Buffer overflow on oversized username...

CVE-2002-1002

Buffer overflow in Novell iManager eMFrame 1.2.1 allows remote attackers to cause a denial of service crash via a long user name...

NOVL-2002-2963081 - Novell iManager (eMFrame 1.2.1) DoS Attack

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 For Immediate Disclosure ============================== Summary ============================== Security Alert: NOVL-2002-2963081 Title: Novell iManager eMFrame 1.2.1 DoS Attack Date: 12 Aug 2002 Revision: 1 Product Name: Novell iManager OS/Platforms:...