Buffer Overflow Vulnerability in Novell iChain Products

CVE-2003-0638

Summary

Novell iChain versions prior to Field Patch 3 for 2.1 and Field Patch 1a for 2.2 have multiple buffer overflow vulnerabilities. These flaws could be exploited by attackers using a long user name or through a specially crafted script intended for the login process. Successful exploitation may lead to a denial of service condition or, more critically, allow the execution of arbitrary code, which could compromise the integrity of the affected systems.

References