Directory traversal

Directory traversal vulnerability in the getEntry method in the PortalModuleInstallManager component in a servlet in nps.jar in the Administration Console aka Access Management Console in Novell Access Manager 3.1 before 3.1.2-281 on Windows allows remote attackers to create arbitrary files with...

CVE-2010-0284

Summary: CVE-2010-0284 affects Novell Access Manager (Administration Console) via the PortalModuleInstallManager in nps.jar. A directory traversal in getEntry allows remote attackers to create arbitrary files and, as a result, execute arbitrary code. This impacts Windows installations of Novell A...