77 matches found
CVE-2004-2757
Cross-site scripting XSS vulnerability in the failed login page in Novell iChain before 2.2 build 2.2.113 and 2.3 First Customer Ship FCS allows remote attackers to inject arbitrary web script or HTML via url parameter...
CVE-2004-2757
CVE-2004-2757 is an XSS vulnerability in the failed login page of Novell iChain prior to version 2.2 build 2.2.113 and 2.3 First Customer Ship. The issue allows remote attackers to inject arbitrary web script or HTML via the url parameter. The provided documents do not specify a product patch/ver...
CVE-2004-2579
ACLCHECK module in Novell iChain 2.3 allows attackers to bypass access control rules of an unspecified component via an unspecified attack vector involving a string that contains escape sequences represented with "overlong UTF-8 encoding."...
CVE-2004-2579
The CVE-2004-2579 entry concerns Novell iChain 2.3. It describes an access-control bypass in an ACLCHECK module caused by an attack vector using a string with overlong UTF-8 encoding that bypasses rules for an unspecified component. CVSS metrics indicate network access, low complexity, and partia...
CVE-2004-2580
Technical details for CVE-2004-2580 are not publicly provided in the connected documents. The vulnerability description exists, but there are no concrete technical specifics (affected product versions, exploit vectors, or remediation) in the supplied material. Monitor for updates.
CVE-2004-2581
Technical details about CVE-2004-2581 are not publicly available in the provided documents. No concrete affected products, versions, or remediation are described here. Monitor for updates from official sources.
CVE-2004-2582
The vulnerability CVE-2004-2582 affects Novell iChain 2.3. The issue is that the proxy server’s HTTP VIA header line reveals the build number, enabling remote attackers to obtain sensitive information. The available documents confirm the affected product and the root cause (build number disclosur...
CVE-2004-2581
Novell iChain 2.3 allows attackers to cause a denial of service via a URL with a "specific string."...
CVE-2004-2582
Novell iChain 2.3 includes the build number in the VIA line of the proxy server's HTTP headers, which allows remote attackers to obtain sensitive information...
CVE-2004-2580
Cross-site scripting XSS vulnerability in Novell iChain 2.3 allows remote attackers to obtain login credentials via unspecified vectors...
CVE-2004-2314
The CVE-2004-2314 entry concerns Novell iChain Server prior to 2.2 Field Patch 3b, version 2.2.116. The Telnet listener is configured with no password by default, allowing remote attackers to gain access if the service is reachable. The vulnerability is rated with a base score of 7.5 (HIGH) by NV...
CVE-2004-2314
The Telnet listener for Novell iChain Server before 2.2 Field Patch 3b 2.2.116 does not have a password by default, which allows remote attackers to gain access...
CVE-2005-0744
The web GUI for Novell iChain 2.2 and 2.3 SP2 and SP3 allows attackers to hijack sessions and gain administrator privileges by 1 sniffing the connection on TCP port 51100 and replaying the authentication information or 2 obtaining and replaying the PCZQX02 authentication cookie from the browser...
CVE-2005-0746
The Mini FTP server in Novell iChain 2.2 and 2.3 SP2 and earlier allows remote unauthenticated attackers to obtain the full path of the server via the PWD command...
CVE-2005-0797
The CVE-2005-0797 entry concerns Novell iChain Mini FTP Server 2.3, where authentication error handling reveals whether a user exists. This information disclosure can facilitate brute-force attempts, since attackers can iterate valid usernames more efficiently. The available sources confirm the a...
CVE-2005-0798
The CVE-2005-0798 entry concerns Novell iChain Mini FTP Server 2.3 (and possibly earlier versions) failing to limit incorrect login attempts, enabling brute-force login attacks over the network. The underlying issue is insufficient authentication attempt throttling on the FTP service, allowing re...
CVE-2005-0797
Novell iChain Mini FTP Server 2.3 displays different error messages if a user exists or not, which allows remote attackers to obtain sensitive information and facilitates brute force attacks...
CVE-2005-0798
Novell iChain Mini FTP Server 2.3, and possibly earlier versions, does not limit the number of incorrect logins, which makes it easier for remote attackers to conduct brute force login attacks...
[ISR] - Novell iChain Mini FTP Server Unauthorized Remote Path Disclosure Vulnerability
|| || ISR || Infobyte Security Research || www.infobyte.com.ar || 03.15.2005 || .:: SUMMARY Novell iChain Mini FTP Server Unauthorized Remote Path Disclosure Vulnerability Version: IChain Version v2.3, It is suspected that all previous versions of IChan are vulnerable. .:: BACKGROUND The Novell...