CVE-2005-3655
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
96.6%
Heap-based buffer overflow in Novell Open Enterprise Server Remote Manager (novell-nrm) in Novell SUSE Linux Enterprise Server 9 allows remote attackers to execute arbitrary code via an HTTP POST request with a negative Content-Length parameter.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| novell | open_enterprise_server | 9 | cpe:2.3:a:novell:open_enterprise_server:9:*:*:*:*:*:*:* |
References
secunia.com/advisories/18484
securityreason.com/securityalert/348
securitytracker.com/id?1015487
www.idefense.com/intelligence/vulnerabilities/display.php?id=371
www.novell.com/linux/security/advisories/2006_02_novellnrm.html
www.osvdb.org/22455
www.securityfocus.com/bid/16226
exchange.xforce.ibmcloud.com/vulnerabilities/24111
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
96.6%