CVE-2010-1929

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Novell iManager - Multiple Vulnerabilities2010-06-24 · dos · novell · Verified

Impact

Multiple stack-based buffer overflows in the jclient._Java_novell_jclient_JClient_defineClass@20 function in jclient.dll in the Tomcat web server in Novell iManager 2.7, 2.7.3, and 2.7.3 FTF2 allow remote authenticated users to execute arbitrary code via the (1) EnteredClassID or (2) NewClassName parameter to nps/servlet/webacc.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://secunia.com/advisories/40281
• http://securitytracker.com/id?1024152
• http://www.coresecurity.com/content/novell-imanager-buffer-overflow-off-by-one-vulnerabilities
• http://www.exploit-db.com/exploits/14010
• http://www.osvdb.org/65737
• http://www.securityfocus.com/archive/1/511983/100/0/threaded
• http://www.securityfocus.com/bid/40480
• http://www.vupen.com/english/advisories/2010/1575
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59694
• http://secunia.com/advisories/40281
• http://securitytracker.com/id?1024152
• http://www.coresecurity.com/content/novell-imanager-buffer-overflow-off-by-one-vulnerabilities
• http://www.exploit-db.com/exploits/14010
• http://www.osvdb.org/65737
• http://www.securityfocus.com/archive/1/511983/100/0/threaded
• http://www.securityfocus.com/bid/40480
• http://www.vupen.com/english/advisories/2010/1575
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59694