Lucene search

[email protected]CVE-2006-4517

HistoryNov 01, 2006 - 3:07 p.m.

CVE-2006-4517

2006-11-0115:07:00

CWE-189

CWE-399

[email protected]

web.nvd.nist.gov

novell

imanager

denial of service

cve-2006-4517

nvd

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.6 Medium

AI Score

Confidence

High

0.059 Low

EPSS

Percentile

93.5%

JSON

Novell iManager 2.5 and 2.0.2 allows remote attackers to cause a denial of service (crash) in the Tomcat server via a long TREE parameter in an HTTP POST, which triggers a NULL pointer dereference.

Affected configurations

NVD

Node

novellimanagerRange≤2.5

novellimanagerMatch1.5

novellimanagerMatch2.0

novellimanagerMatch2.0.2

CPENameOperatorVersion
novell:imanagernovell imanagerle2.5
novell:imanagernovell imanagereq1.5
novell:imanagernovell imanagereq2.0
novell:imanagernovell imanagereq2.0.2

CPE	Name	Operator	Version
novell:imanager	novell imanager	le	2.5
novell:imanager	novell imanager	eq	1.5
novell:imanager	novell imanager	eq	2.0
novell:imanager	novell imanager	eq	2.0.2

References

labs.idefense.com/intelligence/vulnerabilities/display.php?id=436

secunia.com/advisories/22657

securitytracker.com/id?1017139

www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=3885713&sliceId=SAL_Public&dialogID=17090866&stateId=0%200%2017098735

www.securityfocus.com/bid/20841

www.vupen.com/english/advisories/2006/4292

exchange.xforce.ibmcloud.com/vulnerabilities/29961

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.6 Medium

AI Score

Confidence

High

0.059 Low

EPSS

Percentile

93.5%

JSON

Related for CVE-2006-4517

checkpoint_advisories1 cvelist1 securityvulns1 nvd1