Lucene search

MitreCVE-2011-2654

HistorySep 06, 2011 - 3:55 p.m.

CVE-2011-2654

2011-09-0615:55:02

CWE-20

mitre

web.nvd.nist.gov

cve-2011-2654

novell cloud manager

rpc

remote code execution

security vulnerability

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.346

Percentile

97.2%

JSON

The RPC implementation in the server in Novell Cloud Manager 1.1.2 before Patch 3 does not properly initialize objects, which allows remote attackers to execute arbitrary code by making RPC calls that leverage incorrect privileges associated with a partially initialized session.

Affected configurations

Nvd

Node

novellcloud_managerRange≤1.1.2patch2

novellcloud_managerMatch1.1.2

novellcloud_managerMatch1.1.2patch1

VendorProductVersionCPE
novellcloud_manager*cpe:2.3:a:novell:cloud_manager:*:patch2:*:*:*:*:*:*
novellcloud_manager1.1.2cpe:2.3:a:novell:cloud_manager:1.1.2:*:*:*:*:*:*:*
novellcloud_manager1.1.2cpe:2.3:a:novell:cloud_manager:1.1.2:patch1:*:*:*:*:*:*

Vendor	Product	Version	CPE
novell	cloud_manager	*	cpe:2.3:a:novell:cloud_manager::patch2::::::*
novell	cloud_manager	1.1.2	cpe:2.3:a:novell:cloud_manager:1.1.2:::::::*
novell	cloud_manager	1.1.2	cpe:2.3:a:novell:cloud_manager:1.1.2:patch1::::::

References

download.novell.com/Download?buildid=NSONlV5PqMo~

secunia.com/advisories/45845

www.securityfocus.com/bid/49432

www.securitytracker.com/id?1026006

zerodayinitiative.com/advisories/ZDI-11-278/

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.346

Percentile

97.2%

JSON

Related for CVE-2011-2654