CVE-2003-0635

Unknown vulnerability or vulnerabilities in Novell iChain 2.2 before Support Pack 1, with unknown impact, possibly related to unauthorized access to 1 NCPIP.NLM and 2 JSTCP.NLM...

CVE-2003-0638

Multiple buffer overflows in Novell iChain 2.1 before Field Patch 3, and iChain 2.2 before Field Patch 1a, allow attackers to cause a denial of service ABEND and possibly execute arbitrary code via 1 a long user name or 2 an unknown attack related to a "special script against login."...

CVE-2003-0636

Novell iChain 2.2 before Support Pack 1 does not properly verify that URL redirects match the DNS name of an accelerator, which allows attackers to redirect URLs to malicious web sites...

CVE-2003-0639

Unknown vulnerability in Novell iChain 2.2 before Support Pack 1 allows users to access restricted or secure pages without authentication...

CVE-2003-0635

Novell iChain 2.2 before Support Pack 1 is listed as vulnerable, with unknown impact and potentially related to unauthorized access to (1) NCPIP.NLM and (2) JSTCP.NLM. The available records do not disclose the root cause, real-world exploit scenarios, or a confirmed impact. Details across connect...

CVE-2003-0637

Novell iChain 2.2 before Support Pack 1 is affected. The issue arises because the authentication timeout for non-existent users is shorter than for valid users, enabling remote attackers to enumerate usernames and perform brute-force password guessing. The root cause is the uneven timeout handlin...

CVE-2003-0636

CVE-2003-0636 concerns Novell iChain 2.2 before Support Pack 1, where the product does not properly verify that URL redirects match the DNS name of an accelerator. This mismatch can allow an attacker to redirect legitimate URLs to malicious sites. The vulnerability is described in NVD with a base...

CVE-2003-0639

CVE-2003-0639 concerns Novell iChain 2.2 prior to Support Pack 1, where an unauthenticated user can access restricted pages. The vulnerability is described as an access control issue that allows bypassing authentication to reach secure content. The public records do not specify the exact vulnerab...

CVE-2003-0638

This CVE (CVE-2003-0638) affects Novell iChain 2.1 prior to Field Patch 3 and iChain 2.2 prior to Field Patch 1a. The vulnerability consists of multiple buffer overflows that can cause a denial of service (ABEND) and may allow arbitrary code execution. Exploitation is described as possible via (1...

CVE-2003-0637

Novell iChain 2.2 before Support Pack 1 uses a shorter timeout for a non-existent user than a valid user, which makes it easier for remote attackers to guess usernames and conduct brute force password guessing...

CVE-2003-0636

Novell iChain 2.2 before Support Pack 1 does not properly verify that URL redirects match the DNS name of an accelerator, which allows attackers to redirect URLs to malicious web sites...

CVE-2003-0638

Multiple buffer overflows in Novell iChain 2.1 before Field Patch 3, and iChain 2.2 before Field Patch 1a, allow attackers to cause a denial of service ABEND and possibly execute arbitrary code via 1 a long user name or 2 an unknown attack related to a "special script against login."...

CVE-2003-0635

Unknown vulnerability or vulnerabilities in Novell iChain 2.2 before Support Pack 1, with unknown impact, possibly related to unauthorized access to 1 NCPIP.NLM and 2 JSTCP.NLM...

CVE-2003-0639

Unknown vulnerability in Novell iChain 2.2 before Support Pack 1 allows users to access restricted or secure pages without authentication...

PT-2003-1766 · Novell · Novell Ichain

Name of the Vulnerable Software and Affected Versions: Novell iChain version 2.2 before Support Pack 1 Description: The issue allows remote attackers to guess usernames and conduct brute force password guessing more easily due to a shorter timeout for non-existent users compared to valid users...

Novell iChain buffer overflow

No description provided...

NOVL-2003-2966205 - iChain 2.2 Field Patch 1a

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 For Immediate Disclosure ============================== Summary ============================== Security Alert: NOVL-2003-2966205 Title: iChain 2.2 Field Patch 1a Date: 05-Jun-2003 Revision: Original Product Name: iChain 2.2 OS/Platforms: Netware...